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I. INTRODUCTION 

An Air Force which has no automated processing capa- 
bility can not accomplish its tasks, in a modern sense. The 
lack of an automated data processing capability will bring 
too many problems. The dynamic nature of the system can not 
bre supported by an old fashion mechanical or semi-automated 
information gathering, storing, and retrieving methods. 

New system will need a powerful processing capability 
and a ccmmunication media to exchange information Letween 
the geographically separated subparts. Establishment of a 
computer system will need a huge investment in terms of both 
hardware and software requirements. But the system can pay 
kack itself by improving .the speed, reliability, security 
and maintability of the processes. 

First section addresses the current system structure and 
the requirements for the new systen. Requirements are not 
discussed in detail. Instead they presents general systen 
reguirements. 

Second section divides the system into modules. Since 
the mcdularization is an important design methodology, we 
also mentioned it in this part. Thus, now it is easier to 
implement the system module by module, in a structured way. 
We alse set the interfaces among these modules. 

In third section we introduced a database model. And an 
example cf this model is presented. 

Section four discusses the networking issues. Since our 
system needs a network to interconnect the independent 
hosts, we presented international standards organization's 
seven layer architecture model. Also, cryptographic methods 
are discussed in this section. 


10 


Section five addresses a Minicomputer selection method- 
ology rather than system's cost analysis. Since system cost 
can depend cn the market conditions, we preferred to present 
this methodology. Thus, it can be used with different 
computer products under different market conditions. And an 


example of the cost evaluation is presented. 
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A. CDEFINITION OF THE PROBLEMS 


An aix force which is made up of two tactic air forces, 
an airlift command, cne training command three supply, main- 
tenance centers has no automated processing capabilities. 
The preblem is to autcmate daily mechanical data retrieving, 
storing and updating the jobs. Thus efficiency, reliability 
and speed of the system will greatly be increased.The actual 
statement of the proklem is design of an information systen 
for an air force command. 


Be SYSTEH ELEMENTS 


As we mentioned earlier, this air force is an hypothet- 
lcal cne which has no strategic missions. Tactic forces are 
considered in the same structure. Each of them has four air 
Frases and its own early warning report center. And again 
each -kase is considered to be in the same structure. Each 
base has two sguadrons one material command and one general 
support ccmmand. At the same time each tactic force has its 
Own supply, @aintenance center. There 1s only one airlift 
command which is directly connected to the air forces 
command. Air training command is also directly connected to 
air fcrces command. This simplified general structure of the 
system is more convenient to be designed easily. Further 
extensions can be made easily after completing the design of 
this mcre general system. In fact, expandability is the one 
or the system design aspects. The detailed hierarchy chart 
of the system is shown in figure 2.1. 

Early warning centers have their own CRP*s (control 
report post). They control the activities of the friendly 
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Figure 2.1 Systers Hierarchy Chart. 
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and enemy forces in their responsibility region. Especially 
they need accurate and fast information systen, to infomm 
the friendly forces at right time. Also supvly and nmainte- 
nance centers are the backbones of the system. The resfonse 
for a particular demand sometime may take a long time. To 
decrease this time, local processing power is not suffi- 
cient. They also need a computer communication with the 
other centers. This system especially will payback itself 
in these twe areas. 


C. HOW CURRENT SYSTESB WORKS? 


Before considering system reguirements we should first 
check tke current system environment. Air operation center 
Claims daily status reports from the TAF and airlift 
command. These reports are related with the current opera- 
tional readiness of troops. Early warning centers send these 
Teports to air operation center of the ccmmand. These 
reports are different from the others in a_ sense that they 
have to te updated immediately. In EWC environment each 
report post has to send status information to its related 
EWC. All troops, have to report all emergency situations 
immediately to the upper level commands. The general struc- 
ture of the headguarters are the same except the size of 
them. Each headguarters has four main parts. They are cper- 
ation, training, intelligence, logistics and personnel. We 
will consider this structure in the same way when we imple- 
ment the. Main resfonsibilities of these systems can be 
Summarized in the following way. 


1. Operation And Training 


This part of the system is responsible for the oper- 
ational readiness. Administration of operations and exer- 
cises are the main responsibility of then. Training the 


personnel for operational readiness is another igpertant 
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assignment of this part. Planniny the operations and 
exercises are also their responsibility. 


2.- Personnel 


This part of the system is responsible to keer all 
personnel records: Fromotions, health status, training and 
Criminal background, assignments, military home status. Also 
this part plans the future personnel policy. It determines 
the training needs for new type of jobs and offers new 
courses related with the new systems. 


3. Intelligence 


This part of the system related with the enemy 
status. They plan the intelligence needs and provide then. 
After providing the needs, this intelligence is evaluated 
and distributed to related troops. They also interrogate the 


pilots who are completed the mission. Preparing the 
necessary maps and target files is also their 
responsifility. 


4. Iogistics 


This part of the system is responsible for froviding 
the every kind of material and stocking, distributing then 
in an intelligent way. Maintenance activities are also their 
responsifility. To accomplish these activities it has three 
regicnal supply and maintenance center. Logistic planning is 
the mest important responsibility of this part. 

These four main part have their own subdivisiors to 
accomplish their task effectively. These subparts are: 
flyer, navigator, maintenance, supply, civil engineering, 
electronic weapons, ammunition, communication, transporta- 
taon , €arly warning, anti-aircraft and missile, and 
comptrcller. 


SS 


D. NEEDS 


In this system environment, connections among troorgs and 
administration are sc frustratiny. We need to eliminate 
waste time which is spent on demand, supply, record keerfing, 
processing, reports. First we have to speed up these activi- 
ties and integrate them in a central authority which manages 
all these activities instantly. Also lower management needs 
its cwh processing power to keep his own activities, 
records. By providing automated processing system, lower 
level management can easily communicate with upper levels or 
vice versa. To frovide something from upper management, low 
level managers need not to go iaterally, in system hier- 
archy. They should have as little responsibilities as 
possikle. The only level that they have to communicate with 
it is one higher level management. By the way higher level 
Managers can easily control what iS going on in lower 
levels. Daily reports have to be generated ina way that is 
accurate and fast. Message traffic in both direction have to 
ke speeded up. Personnel do not have to be too much busy 
because of the daily routine jobs. The number of perscnnel 
who is in charge of doing these jobs have to be decreased. 
At the same time we should forget the papers which are in 
useless form in terags of processing. Office automaticn is 
the one cf the important issues. 

By providing processing power to lower level management, 
they can manage the jobs independently. Thus they can 
utilize all the sources efficiently, no overhead for higher 
level management. Quick response for a demand is the essen- 
tial point for efficiency of operation. Personnel need more 
time for doing real jobs rather than doiny daily routine 
rookkeering things. If we would like to define reguirements 


more precisely, we can Summarize tnem in the following way: 
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1. Generation Of Reports 


These reports are divided into two groups. One of 
them is periodicals. These reports are sent daily, mecnthly 
or sewi annually. They contain personnel and material status 
informations. Other group is the nonperiodicals which are 
almost related with the emergency situations and special 


cases. They are usually urgent and have priority. 


2. General Bookkeeping 


At different levels there is a big necessity for 
bookkeefing activities. These are very large jobs and need 
freguent prccessing. In mechanical processing most of the 
time is spent to store and retrieve these informaticn, 
rather then processing them. Storing them in mechanical way 
needs too much space and personnel time. 


Sending and receiving messages are done by the neans 
of teletypewriters. even in this environment this autona- 
tion does not satisfy the system constraints.They are time 
consuming too. Some messages or orders have priority and 
secrecy. Stcring and retrieving these messages are also time 
consuming. Nowadays message traffic is over the standard 
level. Electronic mailing is the one of the aspects of the 


new System. 
4. Schedules 


There are different kind of scheduling requirements 
in different units. All these scheduling activities are 
done [Ey manpower. As a result of these schedules are not 
Froductive, economical, even sometimes they are kig 
Clashes. Lack of the local computer processing fower, 


results in a time consuming, unproductive scheduling. 
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Especially airlift command needs different scheduling 


algorithgs and its own processing power. 
9- Fersonnel Reccrds 


Fersonnel reccrds ccnsist so much informaticn abcut 


personnel. Decisions on fersonnel are made according to 
these records. Storing, retrieving, searching of these 
records are very hard and time consuming. Promotions, 


asSignments are also made according to these records. Each 
year all records are searched all together. By mechanical 
way all these activities take a year ions. Payroll systen 
has keen already set up. For other tasks there is a need for 
datakase system to prccess all these activities. 


6. Intelligence kKecords 





These records like personnel records are continu- 
ouSly changed and kert in files. We would like to access 
these records frequently. It wiil be very useful to keep 
them in a database in terms of storing, retrieving, 
updating, distributing them easily. 


7. Logistic Rececrds 


Frotably the larjest manpower is consumed by keeping 
the logistic records there are millions of items in inven- 
tory of the air forces. Stock control 1S an important issue. 
Keeping the names and part no's of these iteas and location 
of them is the most time consuming probiem. We need a very 
kig processing capability and a database. Also the nature of 
the problem requires a computer network which is established 
among the supply centers andthe related commands. The 
Slowest part of the entire system is the logistic systen. 
Also supply centers need a computer processing power anda 
dataktase to keep their records. 
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8. Cthers 


Air forces need a computer network to accomplish its 
task 1n a modern sense. Since the subparts of the systems 
are related with each other, computer network is the one of 
its requirements. All the jobs are in the form of stcring 
retrieving, updating or processinj of information. Thus we 


need a well designed database system to handle these joks. 
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III. BREAK IHE SYSTEM DOWN INTO MODULES 


A. CENTRAL DATA,DISTRIBUTED DATA 


Before considering the issue of how we can’ Ereak the 
system down into modules, we should first look at the issue 
of what should be centralized and what should be decentral- 
ized. The answer to this question will determine the modular 
structure of the system. In the first chapter we have given 
the hierarchical structure of the system. System components 
are geographically distributed. According to system hier- 
archy and the system requirements we should answer the ques- 
tion above. The DP or DDP strategy should start with a top 
Management view of where the corporation is going and how 
its direction might te changed by networks, database usage, 
microcomputers and DPP. The igplemention of data processing 
takes one of two forms: designed or ad hoc. In ad hoc 
systems user groups do their own things hoping for no 
external interference. Designed systems need to begin with a 
corporate strategy. This strategy will keep us away froma 
dozen side effects of ad hoc implementation. When we were 
talking about the needs of the system; we have said that the 
local frecessing power is the one of the important issues.In 
distributed environment,the users can develop their own 
Frojgrams and now may have powerful compilers, report genera- 
tors and other software on a central system to help then. 
While most of their frograms use the local machine, they are 
not restricted to using only that. They can develop applica- 
tions which sometimes need the power of large remote machine 
or data which are maintained centrally. Centralized stan- 
dardization can be welcomed by decentralized groups if it 
has the appearance of being a service to them, as in the 
case of a corporate data dictionary. 
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Distributing processing can thus facilitate local 
autoncmy, initiative and responsibility without obliterating 
the advantages of centralized data planning and data-base 
software. The user departments are freed from amcst of the 
frustraticns of being tied to an overburdened DP department. 
They can achieve mruch quicker implementation of their 
requirements and tailcer them exactly to their needs . They 
can guickly modify their programs to adjust the local situ- 
ations. The rigidities of the centralized scheduling are 
avoided. The centralized authorities on the other hand have 
not lest the ability to manaye the overall system's growth 
in the corporation. MThere is a delicate balance between the 
degree cf local autonomy and the degree of centralized 
control. We can separate the local and the central 
responsibilities in the following way: 
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1. Centralized Responsibilities 


1. definiticn of local and central responsitili- 


ties (design considerations) 
2. Choice of network standards 
3. Choice of data descriptions language 
4. Choice of data-base software 


5. Database administration services including the 


coordinated design of the data 
6. Maintenance of a system data dictionary 


7. Selection and design of apfplications to serve 


multiple locations 


@. Selection of applications to be transferred 


between locations 
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S. Review of documentation of applications trans- 


ferred between locations 


10. Guidance cn modularization needed to facilitate 


applicd ticneteanste. 
11. Technical consulting services 
12. System security design and administration 


13. Design of system auditing controls and facili- 


ties 


2. Decentralized Responsibilities 


1. Local apyslication development 


z- Design cf locally used files 


3. Design of subschemas which relate to a remote 
datakase in conjunction with a central database 
administrator 


4. Selection cf equipment within the constraints of 


corporate recommendations 


5S. Development and documentation of applications 


intended for transfer to other locations 


6. Modifications of applications received fron 


other locations 


7. Liaison with centralized authorities on schema 


development and standardization of data items 


&. Liaison with other locations on applications 


developed for common use 


In our system design,distributed is the one of the 
design issues. So we should also give some objectives which 


justify our design ccnsiderations. 
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3. dZTypes Of Objectives For Distributed Data 


1. A highly distributed user community 


2. Low cost. Data replication is cheaper than 
long-distance transmission for the wid bh Ere 
volumes. This argument is stronger for ccuntries 
which do not have low-cost data networks. 


3. A need for high availability the data remain 
available when one or more copies of it are 
ilnaccessikle or long distance transmission links 
are down. 


4. The military need for surviveability. Data 
remain available after destruction of multiple 
nodes. 


5. Fast resfense time. Access to a local data is 
faster than access to a distant highly shared 
data. 


6. Tunability. Data can be moved to different 
nodes aS usage patterns change. Data heavily 
used in cre geographic region can be stored near 
that region. 


7. Traffic volumes are too high for ae single 


Storage systen. 


A major task for more corporations over the ten 
years ahead is to decide what databases they need, where 
they are best located, what data should be stored in then 
and how they should Le organized. The amount of data stored 
will increase drastically, and the ways the data are orga- 
nized will be fundamentally changed to increase their 
usefulness. Data bases will become the foundation stone of 


much ccrrorate data frocessing. One of the most difficult 
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tricks that we have tc learn 1s how to introduce automation 
without Introducing  rilgicle. Database techniques are an 
important part of the answer. A database is intended tc make 
data independent of the programs that use them. Old applica- 
tion programs do not have to te rewritten when changes are 
made to data structures, data layout or the physical devices 
on which data are stored. The data can be easily reorganized 
or their structure added. Now with the distributed systems 
we have anew requirements. If the data are distrikuted 
existing programs should not have to be rewritten. In other 
words se want the data-base system itself to be distributed. 


Be. SPLIT THE DATA 


Data can be divided within a distributed system as fcllews: 


1. Geographical | 


2. Type of data 
3. Type of usage 


1. Geographical Divisio 





If data originate and are used in given geographical areas 
then geografhical division may make sense. This type of 


divisicn can; 


1. reduce tke cost 

2. Increase the system availability 

3. Increase the accessability of the data 

4. Give faster response time 

5. Permit lccal users to maintain control over 
their own data 


On the other hand it gay; 


1. Increase the total system cost 


Ze Become ccrplex 
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+. Be unsecure 
4. Be very difficult to inteyrate later 


2- Division By Type Of Data 


In large organization computer systems fperforn 
different sets of functions. They may be entirely different 
independent systems. However, teleconmunications links are 
found Letween then, or one terminal may have access to 
multirle systems. The data are divided by data type. The 
advantages cf this type divisicn can be; 


1. Local implementation and control are desirakle 


Zoe SLOPIVCE ty. To fut all applications on one 
machine can be highly complex. It is often 


easier tc inoplement smaller systems. 


3. Politics. Local management wants control of its 


own data processing. 


4. Security. The data could be reconstructed at the 

other center from log tapes and file dumps. 

The major danger of of separate data systems arises 
when data are designed in incompatible ways. Many corfora- 
tions, government departments and military organizaticns 
have staggering proliferation of incompatible data and a 
growing reed to merge data or develop applications which use 
data frcem separate systems. In most cases the desired 


conversicn or migraticn is never performed. 


3- Division By Type Of Usage 


Sometimes the distinction is made according to the 
usage of the system. If it is a production or an operation 
system, it should be designed for a precisely defined set of 


Operations. The exact nature of the system is known in 
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advance. In an information system the nature of the queries 
is not known in detail. The data structures are designed to 
handle spontaneous gueries which may differ widely in their 
nature and may require the data to be searched in various 
wayS. The value of a good information system 1s sometimes 
higher than that of an oferations system using the same 
data, bkecause it enables management to make better 
decisions. 

Cur system will be geographically divided,because of 
the nature of the system needs this type of divisicn. After 
these considerations, now we can apply all of them in our 
system. First of all we should determine the systen 


configuraticn. 


Ce. SYSTEM CONFIGURATION 


Since our system has a hierarchical structure and the nature 
of the ccnmmunication is vertical we should choose a configu- 
ration which satisfies our goals which are discussed in 
chapter Zz. Hierarchical configuration is most appropriate 
one to satisfy our gcals. The data in lower-level machines 
are closely related to those in the higher-level machines. 
They are often a subset of a higher-level data used for 
applications. The master copy of the data may be kept by the 
higher-level machine. When a change 1s made to the data in 
the lewer level machine, this change must be passed up to 
the higher level machine sometimes immediately, sometimes 
later in updating cycle. This is the dependent hierarchical 
data configuration which has been shown in Figure 3.1. in 
our iszplementation scmetimes higher-level management need 
not te have all the data reside in lower-level machine, or 
lower level machines may store the some of the data which 
are in the higher machine and also have some which are its 
cwh they are never passed upwards. The bulky data are rever 
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Figure 3.1 Hierarchical Dependent Data Configuration. 


needed by the higher-level parts. For instance Air Force 
Command cnly need to have the number of operational cr unop- 
eraticnal aircrafts. It may not need to know what kind of 
problems that these aircrafts have. The detailed data 
related to these aircrafts might be kept in base's datatase. 
On the other hand, fersonnel files are kept by both of the 
Command and base itself. 


D. MULTIPLE COPIES CF DATA 


In our implementation some couponents will have the same 
data. In this case care is needed in planning the urdates 
and the recovery frem failures. Restart and recovery can 
present froblems 1f the datalase are being continuously 
updated. The most easily controllable approach is to have 


Single ccpy of the data. The other replicated are regarded 
as secondary to the master copy. The system is designed so 
that if the master copy 1s destroyed ant can be 
reconstructed. 


Different data each has a single master copy but these 
could Fe stored in different locations. In our system imple- 
mentation Air Force Ccmmand will have the some parts of the 
datakase of TAFs, Airlift Command, and Training Command. 
And TAFs also will have the some parts of the database of 
the Eases. If anyone of the AFCOM's or TAF's database is 
destroyed, integrity can be provided from the copies of data 
which are at lower-level command's databases. This applica- 
tion is neither exactly master copy approach nor freely 
distributed approach but the combination of then. This 
application will bring us the benefits of the both 
approaches. The most important one 1S tae storage saving. 
By storing the only some part of the data of lower level 
command's databases will save us a lot of memory space. And 
Ey providing the recovery frocedures will provide the 
datakase integrity. 


1. Master Copy Updating 


When we use the master copy approach database may or 


may not re updated in real time. There are two approaches. 


1. All transactions immediately update the master. 
The master issues new copies of changed records 


to other frocesses periodically. 
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2. Transactions update a nonmaster file. All trans- 
actions are saved for periodic updating of the 
Master. When the master is updated new copies of 
Changed records are sent to other processcrs 


which use then. 


After a failure of part of the system resynchroniza- 
tion is achieved by issuing new copies of any changed 
records in the master to the processors which keep them. If 
the master itself fails then copies of the transactions must 
ke kept until it recovers. So that it can be updated and 
then in turn issue ccpies of the changed records to other 
processors which keer then. 

In cur isplementation the only real time updates are 
the Status Reports updates and EW updates. All the cther 
updates are saved and then they periodically update the 
master. 

Now we can freak the system down into modules 
according to considerations presented so far. AFCOM has its 
Own mainframe computer. It also includes the data which are 
in TAF's, Supply and maintenance center's, Airlift Command's 
and Air Training Command's database. TAFs hold some data 
which ccne from the bases. Base is the smallest mcdule 
which gathers information from its subparts. TAFs also hold 
the scme data which ccme from the its own supply and mainte- 
Nhance center. The mcst important data TAFs have, is the 
early warning fCceports. Those data need to be updated in 
real time, and have to be sent to command's database. JCaily 
routine status reports are sent to TAFs database. Those 
reports are also updated in real time, since they are very 
small and important in terms of operational decision making. 
All cther kind of data can fe updated periodically. 

In system hierarchy lower-level modules can reach to 


top level via the intermediate level modules. They can't 
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access to top level independently. TAF1 and Base 1 are 
located at the same place. TAF 2 and Base 5 are located at 
the same place. One of the supply and maintenance center is 
located at the AFCOM's location. These are important only in 
terms of hardware requirements. In base environment subrfarts 
have terminals which frovide communication with base's mini 
computer. TAFs, ATCOM, ALCOM and bases have their own minis. 
In general each level communicate witad one level higher. For 
instance bases first have to update the TAF's database.Tken 
gathered updates can fe transmitted to Command's database by 
TAFS. This will reduce the communication costs. In urgent 
Situations a module can immediately update the both 
Command's and TAF‘*s database. For instance early warning 
reports and status rerforts can be updated parallelly. Our 
system has the same structure which has been shown in Figure 
Salk x This kind of ‘configuration will eliminate the 
complexity. If every module of the system interacts with 
every other the number of interactions grows at approxi- 
mately the square of the number of modules N(N-1)/2 inter- 
action for n modules. It has been observed that as system 
grows they become mcre complex and harder to manage. The 
complexity and cost following roughly a square law. The 
optimum solution can te found at a point in which economies 
of scale and complexity are balanced. (Ref. 1) In this 
envircnment the system modularization can be demonstrated in 
Figure 3.2. 

In this implementation we considered two things. 
First of all geographically close nodes connected to 
centers. And those ccnnected nodes are also hierarchically 
related with each other. Thus this implementation 1s more 
appropriate than the cthers, like pure logical connection or 
pure geographical connection. Also it is convenient to be 
modified easily whenever we need to change the systen 
configuraticn. 
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Figure 3.2 Modular Structure Of The Systen. 


Aw. INTRCDUCTION 


A datakase is the interface between the people and 
machines. The nature of these components is utterly 
different. The difficulty is to develop a database which 
meets the needs of the people who will use it, and which is 
practical in terms cf technology and hardware. Since the 
datakase is the pridce between humans on one side and hard- 
ware cn the other, it must match the characteristics of 
each. 

A datakase supports a community of users whose needs 
partly overlap, partly diverge, and partly conflict. 
Unfortunately there is no algorithm for database design. 
Catakase design is beth art and science. Dealing with peo;yle 
understanding what they want today, predicting what they 
will want tcmorrow, differentiating between individual needs 
and community needs and making appropriate design tradeoffs 
are artistic tasks. 

Datarase design iS a two-phased process. First we 
examine the users's reguirements and build a concerftual 
datakase structure that is a mcdel of an organization. MThis 
phase of database design is often called logical database 
design. Once the logical design of the datakase is 
completed, this design is formulated in terms of a partic- 
ular CBMS . Usually compromises must be made . For example 
the LEMS may not be able to express relationships precisely 
as the users see them. The process of formulating the 
logical design in terms of DBMS facilities 1s called 
physical database design. 
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We have examined the user reguirements in Chapter 1. In 
this Chafter we will build a conceptual database structure, 


namely tke logical database design. 


B. SURVEY CF PROMINENT DATABASE MODELS 


Figure 4.1, portrays six common and useful database 
models. Models on the left-hand side of this figure tend to 
ke oriented toward machines and machine specifications. Two 
categcries of database models have been omitted. These 
categories are the hierarchical and network data modéels.A 
model is hierarchical if its only data structure a hierarchy 
(tree). A model iS network if its data structures are bcth 
trees and simple networks. Only complex networks need to be 
decomposed before they are represented. The hierarchical 
model has become toc narrow and the network data model too 


Eroad. 

Human machine 
(logical) (physical) 
Semantic Entity Relational CODASYL DBMS 
data model relaticnship data DBTG specific 
(SDM) model (E-R) model model model 


ANSI/ X3/ SPARC 


Figure 4.1 Classification Of Database Models. 
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C. LCGICAL DATABASE [ESIGN 


As stated database deSign 1S an intuitive and artistic 
Frocess. There is ne algorithm for it. Typically Gatae 
design 1S ar iterative process during each iteration, the 


goal is to get closer to an acceptable design.Thus a design 
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Figure 4.2 Flow Of The Database Design. 


will re developed and then reviewed. Defects in the design 
will be identified andthe design will he redone. This 
Frocess is reviewed until the development team and users can 
find no gajor defects. Figure 4.2, illustrates the flow of 
work in a typical database design project. User reguirezents 


are studied and a lcegical database design is developed. 
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Concurrently the preliminary design of database processing, 
programs is produced.Next the logical database and the 
preliminary designs are used to develojy the physical data- 
base design and the detailed program specifications. Finally 
broth of these are input to the implementation phase of the 
Project. 


1. Cutguts C£ Logical Database Design 


A logical database design specifies the Ilecgical 
format of the database. The records to be maintained, their 
contents and relaticnships among those records are sfeci- 
fied. It is sometimes called the schena, the conceptual 
schema, cr the logical schema. 


ae LOGICAL CATABASE RECORDS 


To specify logical records the designer must 
determine the level cf the detail of the database model. If 
the model is highly aggregated and generalized, there will 
ke few records. If the model is detailed there will be many 
records. The database designer must examine the reguirements 
to determine how ccarse or how fine the database amodel 
Should be. The contents of these records are specified 
during logical design. Names cf the fields and their fcrnmat 
must ke determined. 

AS the reguirements are evaluated and the design 
progresses constraints on data items will be identified. 
These constraints are limitations on the values that data- 
kase can have. Three types of constructs are common. field 
constraints limit the values that a given data item have. 
Intrarecord constraints limit values between fields within a 
given record. Interrecord constraints limit the values 


ketween fields in different records. 
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ke. LOGICAL CATABASE KECORD RELATIONSHIPS 


The essence of database is the representaticn of 
the record relationships. These relationships are specified 
during the logical design. The designer studies the applica- 
tion environment examines the reyuirements and identifies 
the necessary relaticnships. In general the relationshif can 
always te omitted later in physical design, where as if the 
relationship were omitted during logical design, it would be 
difficult to add it iater. The determination of record tyres 
and relationships is an iterative process. While identifying 
relationshirs the team may discover a reason fora new 
record type; and while discussing record types the team may 
identify a relationship. These two constructs are designed 
Simultaneously. 


2. Design Reviews 


The final stage of logical database: design is a 
review. The logical schema and the user views are examined 
in light of the requirements and program descriptions. Every 
attempt is made to identify omnissions, unworkable aspects, 
cr other flows in the design. Typically a panel of indepen- 
dent data processing people is convened for this review. 
Documentaticn of the logical schema, user views, and progran 
descriptions is examined by the panel and the oral presenta- 
tions are evaluated. At the conclusion of the design review 
the fanel produces a list of problems discovered and a 
recommendation regarding the next step to be taken. The 
panel usually recommends that the project be continued while 
identified problems are fixed. OccaSionally however the 
design fanel may recommend that the database design be 
repeated. Very rarely the panel may cecommend that’ the 
Froject re discontinued. 
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3. Logical Design Primitives 


A logical design is a representation of reality. It 
is a model of aspects of some activity that are interest to 
sponscrs of the datatkase. Such models represent selected 
portions of reality; the models are developed by aggregation 
and generalization. Since the database represents a subset 
of reality, some guestions about reality become unanswer- 
able. Tke goal when developing a database design is tc nake 
only uninteresting questions unanswerable. 
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4. FErimitive 


es In The Real World 


Before we begin to design files and relationshifs we 
need to describe the foundations of the data modeling. We 
need to answer questions like: Where do we begin? What is it 
that we are trying to represent? With what aspects of 
reality are we to re concerned? We have to be careful 
answering these questions. 

To make progress, therefore we need to establish a 
starting point. We will begin witn a set of fundamental 
structures or primitives. 


1. The first primitive is object. The real world 
has objects they are phenomena that can be 


represented by nouns. 


2.e Objects are grouped into object classes, another 
important primitive. This is done by generali- 


zation. 


3. Objects have properties. A property is a charac- 


teristic cf an object. 


4. The collection of all possible instances of a 


property is called a property value set. 
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5. A fact is an assertion that for a given ob jee 
a particular property has a particular element 
from the rfroperty value set. 


6. Objects can be related to one another. These 
relations are called associations. Associations 
can exist between objects of the same class or 
of different classes. 


S. Frimitives In The Conceptual World 


When we design or process a database we are not 
working with real world primitives like objects and precper- 


ties. We are working with the representations of these 


Real world primitives Conceptual primitives 
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Figure 4.3 Conceptual Primitives. 
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primitives. As we defined in previous subsection there are 
correspondences of the real world primitives which are 
called ccnceptual primitives which are illustrated in Figure 
ie @ 
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D. THEE SEMANTIC DATA MODEL 


The semantic data model (SDM) was developed by Hammer 
and Mcleod [Ref. 2] and first published in 1981. We will use 
this mcdéel to design cur datakase. 

The most important advantage of SDM is that it provides 
a facility for expressing meaniny about the data in the 
datatase. During Jlcgical database design we need such a 
facility to avcid confusion and to document learnings, 
design decisions, and constraints. SDM provides’ ketter 
facilities for such dccumentation than other data models. 

Anctker advantage of the SDM is that it allows data to 
ke described in context. Users see data from different 
perspectives. They see it relative to their field of 
operation. SDM allows relative data definition. 

A third advantage of ‘SDM is that constraints on database 
data can ke defined for exanpple if a given item is not 
Changeable SDM allows this fact to be stated. Also, if an 
attribute must conform to a particular format these consid- 
erations can readily re defined. With other data models such 
constraints are not fart of the schema descripticn and are 
documented separately. 

SDM describes the structure of data instead of structure 
of prcegrams. SDM has certain structures and rules and with 
those structures and rules the designer has a _ good deal of 
latitude and flexibility. 


1. Defining Entity Classes 


Entities are organized into classes. Each SDM entity 
class may have a name, a description, members (the entities) 
and two kind of attributes. Figure 4.4, shows the kasic 
format of an SDM entity class description. In this figure 
entity class names are printed in capital letters. SDM terms 


are shown in small letters followed by a colon. 
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mg pm SS pre a mm ccm rm a rr re 


ENTITY _CLASS_NAME 
(de€SEA pt 10 ny) eee) 
(interclass connection: ____) 

member attributes: 

Attribute_name 


value class: 


(mandatory) 
(multival ved) 

(exhausts value class) 

(not chanseable) 

(inverse: Attribute_name) 
| 


(match: Attribute name of ENTITY 
CLASS on Attribute name2) 


(derivaticn: ___»?) 
class attributes: 
Attribute name 
(description; oe) 


value class: 


=> a 


(derivation: ___») 


identifiers: 
Attribute_namel + (Attribute _name2 + (..)) 


Figure 4.4 Entity Class Description. 


Entity class is named and then an informal descrip- 
tion of the class is provided. The description which is 
opticnal defines the purpose of and content of the class. 
Special remarks are also written here. Next the member 
attrikrutes are defined. These are attributes of the entities 
in this class. Class attributes, which are optional belcng 


to the class as a whole and not to any particular member. 


4Q 


z- Nonkase Entity Classes 


——— oa === =— =e SP Sl a 


Nonkase classes are constructed from subsets of of 
other classes, Every nonbase class has an entry Interclass 
connection that describes how the class 1s «so be 
constructed. For suksets the interclass connection names 
another class and specifies which members of that class are 


to be included in the new class. 


Each entity or member of a class has a set of attri- 
butes. These attributes represent the properties of objects. 
In SDM each attribute has a name, an optional description a 
value class and a set of optional characteristics. These are 









Value class Mandatory The domain of the attribute 


Name Mandatory Initial capital letter - 
Description Opticnal Remarks about attribute 
Descriptor characteristics Default Value 
Single or nultivalued Single 

Value cptional or mandatory Optional 

Changeable or not changeable Changeable 


Exhaustive or nonexhaustive Nonexhaustive 


Overlapping or noncverlapping Overlapping 


Figure 4.5 Attributes. 


Summarized in figure 4.5 Attribute names are printed with 
initial capitals. They must be unigue within the class 
where they are defined. Also, they must be unigue within 
all classes that derived from their class of definition. 
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YW. Attribute Value Classes 


Each attribute must have a value class. In SDM value 
classes are defined as entity classes. Thus the definition 
of every attribute references another value class which 
references another andon and on. However regression is 
stopped in SDM by the existence of special class called 
Strings. String is a default entity class; it needs no defi- 
nition. Strings contains any character string that the 


designer wants. Any nonambiguous definition of a string is 


allowed. 

There are two advantages of defining attribute 
domains as entity classes. First the formats and _ the 
constraints on data items are clearly specified. Second 


allowing attributes to be members of entity classes permits 
a very natural, humay oriented way of expressing the 
relationshifs. 


5. Additional Attribute Characteristics 





As we have shown in Figure 4.5, there are scne 
additicnal characteristics of attributes. 

Attributes can be Single or multivalued (like 
repeating fields); they can be mandatory, meaning thata 
null value is never to be accepted; attributes can be not 
changeable, meaning that except to correct errors, the value 
cf the attribute must remain same. 

An attribute can be exhaustive, meaning that every 
member of the value class must be used. A multivalued attri- 
kutes can be specified as nonoverlaping this means that a 


member of the value class can Ee used at once. 


6. Lefining Relationships 


SDM provides three facilities for defining relation- 
ships. All three facilities use the SDM characteristic that 


entities can be contained within entities. 
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ae Defining Relationships With Inverse 


The inverse facility causes two entities to be 
contained within each other. Fhysically this is impossible. 
Seguential including of each attribute to each other will 
result in infinite regression. But for our purposes we will 
ignore the infinite regression. After the first level all 
regressicns are duplications of the data and hence uninmpor- 
tant. The beauty of SIM is that users can have it both ways. 
They can see data as they want to see data, even if these 
ways are seemingly ccntradictory. In actuality these views 
do not cenflict at all. They are simply different views of 
the same thing. 


rk. Defining Relaticnships With Matching 


The second SDM facility for representing rela- 
tionships iS matching. With matching a member of one entity 
Class is matched with a member of anotner entity class. Then 
the value of an attrikute in one of the members is noved to 
the cther. The word ON defines how the members in the two 


Classé¢ nust match. 


c. Defining kelationships With Derivations 


SDM provides a derivation capability for attri- 
butes. Derivation can be used to specify relationshifs anong 
members in the same entity class. Thus we can derive new 
attributes from the existed ones. [Ref. 3] 

So far we have talked about logical database 
design and the semantic data base model. Now,by using these 
information,we will design our database for Air Forces 
Command. First of all we should reconsider these require- 
ments which have been discussed in Chapter 1. We should 
define the records, according to these reguirements. 
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At the first step we built nine separate records 


for Air Forces Command. These records are in following: 


1. Weapons 

ze AmmMuniticr 
3. Perscnnel 

4. Intelligence 
5. Status 

€. Installation 
1. 1oguSties 

8. Maintenance 
S$. Courses 


These reccrds make up the schema. Other levels 
in air force system have a subset of this schema. They have 
almost same records Eut the information in these records are 
limited with their needs. 

For instance Tactical Air Forces have the infor- 
maticn just for the Eases which are dependent to TAF, Supply 
and maintenance centers, EW center. Bases can not have the 
information related with an another base. They have the 
information related cnly with itsS own subparts. 

TAFS have exactly the same records tc which 
AFCOM has. But the only difference, 1s AFCOM has much nore 
data than bases have. In base's database courses reccrd has 
not k-een included, Frecause it is needless. Rest of the 
records are also included in base database. We designed only 
the minigal number of records here. Since, different aprpli- 
cations will need different records. What we did here is an 
example of the Logical database design. Thus, we will not 
consider the database needs of EWCs and supply, maintenance 
centers. These can be implemented in the same way which will 
re shcwn later in this chapter. Thus only one database 
design can te used by all the system components. This will 
ke very effective in terms of simplicity, back-up, recovery, 


security and integrity. Especially this kind of design 
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consideration will kre very useful, when we consider the 
network facilities for this systen. Networking can be 
achieved easily because of the simplicity and regularity of 
databases which reside in different places and different 
machines. 

After these considerations now, we can lock at 
the datatase itself. Again the formal structure of the data- 
base is taken from SDM, and it has the same structure with 


the one which has been illustrated in Figure 8. 


FE. WEAFCNS 


ie GESCLipt2 on: Includes all the information,related 
with every type of weapon systems which are 
currently in Air Force inventory. 


2. member attributes: 
a) Wtype 
1) description:Typfe of the weapon system of the 
friendly forces and and enemy forces. 
11) value class: WEAPON_TYPE 
111) mandatory 
b) Wid 
1) description: Whether the weapon is enemy's 
or ours or both's. 


11) value class: FRIEND_FOE 
111i) mandatory 


c) Wrange 


1) description: Effective range of the weafon 
systen. 
11) value class: RANGE 
d) Wfuel 
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a5) description: Fuel capacity of the system if 


it uses fuel. 


a) value class: FUEL 
e) Wlbs 
i) description: Maximum ammunition lcad cf the 


weapcn system. 
11) value class: MAX_LOAD 


£22) not changeable 


f) Wammno 
1) description: Types of ammunition which can 
be used by this type of weapon system . 
a5) value class: AMMUNITION 
111) inverse: WHERE_USED 


iv) multivalued 
v) mandatory 
g) Wun 
1) description: The total number of this type 


of weapon system. 
11) value class: NUMBER_OF_WEAPONS 
111) mandatory 


liv) class attributes: 
h) Wdate 
1) description: Day of the year on which the 


information is valid(last changing date). 
ii) value class:DATE 


3. identifiers: WTYPE 


F. AMMUNITION 


i. descriptions: Includes all the information related 
with every type of ammunition which are currently in 


air forces inventory. 
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2. member attributes: 


a) 


b) 


Cc) 


d) 


e) 


t) 


Acat 


1) 


ii) 
iii) 


ay) 


the 
which are used in weapon systems. 
AMMO_CATEGORY 


description: Category of ammunition 
value class: 
mandatory 


not changeable 


Where_used 


1) 


11) 
111) 
1Vv) 
Anu 


1) 


11) 
111) 
Albs 


1) 


ii) 
iii) 


iv) 


Akill 


1) 


1i) 
Awar 
i) 


1i) 


description: Types of weapons which use this 
categcry of ammunition. 

value class: WEAPONS 

WA MMO 

multivalued 


inverse: 


description; Total number of this category 
c£ ammunition currently in inventory . 
value class:NUMBER_OF_WEAPONS 


mandatory 


Weight of one round of this 


categcry of ammunition. 
MAX LOAD 


description: 


value class: 
mandatory 


not changeable 


description: Killing radius of this category 
ammunition. 


value class: RANGE 


Type of warhead of ammunition. 
WARHEAD_CAT 


description: 


value class: 
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a 


J) 


P12) 
iv) 
Adate 


i) 


2015) 


multivalued 


class attributes: 


description: Day of the year on which the 
information is valid (last changing date). 
value class; LATE 


Identifiers: ACAT 


Ge. PERSCHBEL 


1. 


description: Includes all the information related 


with the personnel who are in charge of Air Forces. 


member attributes: 


a) 


D) 


Cc) 


d) 


Pname 

1) description:First name of personnel. 
zi) value class: NAME 
111) mandatory 

iv) not changeakle 
Plastname 

1) value class: NAME 
11) mandatory 

111) not changeable 
Paddress 

1) value class: ADDRESS 
ii) mandatory 

Gradyear_ degree 


1) 


description: Graduation year from Air Force 
academy or technical schools and graduation 
degreeé are concatenated to make a unigue 
key. 
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e) 


f) 


g) 


h) 


1) 


J) 


11) value class: GRADYEAR_DEG 


1ii) mandatory 


iv) hot changeable 

Assgnmntloc_date 

1) description: Name of the locations at which 
the personnel have been there at least once, 
after graduation. Assignment date to those 
locations is concatenated. 

11) value class; LOCATIONS 

111) mandatory 

iv) nultivalued 

Rank 

1) value class: RANK 

11) mandatory 

Prodate ; 

1) Description: Date of the last promotion. 

ii) value class: DATE 

1ii) mandatory 

Specode 

1) description: Indicates the personnel'ts 
special training or skill area. 

11) value class:SPECIALTY 

111i) mandatory 

iv) multivalued 

Marsta 

1) description: Marital status of personnel. 

11) value class: MAR_STA 

Wife _name-occupat ion 


1) desccription: Wife's name and occufation are 
concatenated . 
11) value class:NAME_OCCUPATION 
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K) 


1) 


n) 


n) 


0) 


P) 


q) 


Child_name_school 


a} description:Child's name and school grade 
are ccncatenated . School grade is repre- 
sented only with its grade (E, H,C) 

B ialy value class:NAME_school 

pig sly multivalued 

Lang_level 

i) description:The languages which are known 
and their levels. 

11) value class: LANGUAGE LEVEL 

111) multivalued 

Paygrade 

1) value class: PAY_GRADE 

a) mandatory 


Punishments 


1) 


11) 


Aa) 


Awards 


1) 
ii) 


description: Summary of the personnel's 
Criminal background. 

value class; PUNISHMENT 

multivalued 


value class: AWARDS _RECEIVED 
multivalued 


Ccurses date 


1) 


ii) 


111) 


descriptions: Course no's and dates to which 
the yersonnel attended. 

value class: COURSE_DATE 

multivalued 


Health_status 


i) 


descriptions: If personnel had any major 
operations or important illness in the past 
those information can be kept with its date 


if Chis pak ce. 
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He 


ty) value class:HEALTH_STATUS 


1ii) multivalued 


3. identifiers: GRADYEAR_DEGREE 
INTELLIGENCE 
1. description: Includes all the information about enemy 
forces. Alsc includes the locations of the eneny 
forces and the date on which the information is 
provided. 
2. member attributes: 


a) Iday 
ah) description: The day of intelligence is 
provided. 
ii) value class; CATE 


111) #=mandatory 


Dyes 2d 
i) description: Id of the enemy installation 
intelligence was made on that. 
11) value class: INSTALLATION_ID 
3411) mandatory 


c) Itype_nun 

i) description: Cbserved weapons and the gquan- 
tity of this type of weapons at that instal- 
laticn. Weafon type is concatenated with the 
humber of this type weapons observed ona 
particular day. 

ii) value class: ITYP_NUM 

111) multivalued 

iv) mandatory 
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ae 


is, ~oTswS 


1. 


d) Artiairtypeé_nun 


e) 


t) 


1) desription: Observed antiagr crag. weapon 
systems and the guantity of this tyre of 
weapcns at that installation. Weapon tyre is 
concatenated with the number of this tyfge 
observed on a particular day . 

11) value class: ANTITYPE_NUM 

111) multivalued 

Location 

i) description: Locations of the anti-aircraft 
weapcn systems. This information can be 
represented by geographical coordinates. 

ii) value class: ANTI_AIRCRAFT_LOCATION 

111) bultivalued 

Weather 

1) descriptions Weather status of the day on 
which the intelligence is provided. ( eésfe- 
cially for photo intelligence , or tactical 
reconnaissance missions ). 

a1) value class: WEATHER_STATUS 


a) Sday 


Identifiers:Iday + Iid + Itype_num + Antiairtype _nunp 


description: Includes periodic information which come 
from all the subparts of Air Forces . This informa- 
tion includes Erief operational readiness in terms of 
equipment , material and personnel. 


member attributes: 


5) 


b) 


Cc) 


d) 


e) 


t) 


J) 


ah) description: The date or the status report 
which is valid for that day. 
11) value class: DATE 


iii) mandatory 


oid 

i) description: Installation id which status 
report belongs to it. 

11) value class: INSTALLATION_ID 

111i) mandatory 

Unoprtype_ pum 

1) description:Unoperational aircraft type and 
the number of then. 

a2) value class: UNOPRTYPE_NUM 

1ii1) multivalued 

Numpers 

1) descriptions:number of the personnel which 
are currently operationally ready in an 
installation. 

ii) value class: NUMBER_OF _ PERSONNEL 

1ii) mandatory 

Tacsta 

1) description; Status of the TACAN system if 
there exists in that installation. 

aes) value class: NAVIGATION STATUS 

Gcasta 

i) description: Status of the GCA systen if 
there exists in that installation. 

ii) value class: NAVIGATION_STATUS 

Rfsta 

1) description:Status of the RF system if there 


exists in that installation. 


a3 


ue 


h) 


1) 


es) value class: NAVIGATION STATUS 

Ilssta 

a) description: Status of the ILS system if 
there existS in that installation . 

a5) value class: NAVIGATION _ STATUS 

Weather 

a) description: Weather status of the installa- 
tion area. 

ii) value class: WEATHER STATUS 

1ii) mandatory 


Identifiers: Sday + Siid 


Je. INSTALLATION 


1. 


description: Includes all the information on instal- 


laticns. 


Identification of installation,tyre of 


weapons, categcry of installation. 


member attributes: 


a) 


b) 


i) 
ails) 
214) 
iv) 


Icat 


description: Installation id which uniguely 
detergzines installation. 

value class: INSTALLATION ID 

mandatory 


not changeable 


description: Installation category.This is 
important in terms of assignments. Because 
each personnel has to be assigned to 
different category of installations for a 
certain period. 
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K. 


ii) value class: INSTALLATION CATEGORY 
1ii) mandatory 


iv) not changeable 


c) Wtype_inunp 
1) description: The type of weapons and the 
guantity of them which are currently in this 
installation. No matter what conditions are 
there in. (operational or unoperational). 
ii) value class: ITYPE_NUM 
111i) mandatory 


iv) multivalued 
d) Ipers 
1) description:Total number of personnel which 


are currently in charge of that installa- 
tion. 
11) value class: NUMBER_OF_PERSONNEL 


111) =mandatory 


3. Identifiers: Iid 

LCGISTICs 

1. description: Includes all the information about 
logistics reccrds, supply and maintenance activities 
and logistics management. 

2. member attributes: 


a) Part_no 
1) description: Unigque standard national part 
no's cf all parts which are currently in Air 
Forces inventory. 
ie) value class: PART_NO 


111) mandatory 


a0 


iv) not changeable 


b) Part_name 
1) value class: PART_NAMES 
c) Lecation_nur 
1) description: Where these parts are located 
and hew many of them are in that locaticn. 
Location and the number are concatenated. 
LZ) value class: LCCATION_NUMBER 
i111) mandatory 


1v) nultivalued 


d) Suppliername_address 
1) description; Name and address of the 
supplier of a particular part are concat- 
enated. There may be more than one supplier 
for some .parts. 
i) value class: NAME_ADDRESS 


111) mandatory 


iv) multivalued 
e) Price 
1) description:Price of one unit of that 


item.This information is needed for bock- 
keeping purposes. Prices may differ from cne 
supplier to ancther. 

ii) value class: ITEM_PRICE 

111i) mandatory 


1v) nultivalued 


f) purchase_date 
1) description: The last date of the purchase 
for a particular item. 
1i) value class: DATE 


3. identifiers: Fartano 


56 


le 


SAINTEBANCE 


1. 


description: Includes all the information in terms of 


planning and executing the maintenance activities. 


member attributes: 


a) 


b) 


C) 


d) 


e) 


Egp_no 
i) description: Serial number of the equipment. 
1i) value class: EQUIPMENT_NO 


1ii) mandatory 


iv) not changeable 
Eqpname 
1) description: Short description of eguifment. 


ii) value class: EQUIPMENT_NAME 


Egpcat 

i) description’: Bguipment 
category (HF ,VHF,UHF,gasoline, diesel) .This is 
a kind of additional information to egquip- 
ment name.This field is optional and it can 
be onitted if wanted so. 

iil) value class: ECP_CATEGORY 


Arrival date 

1) description; The date on which the eguirment 
arrived at the supply and maintenance 
center. This is important because of mainte- 
nance planning. 

ii) value class: DATE 


1ii) mandatory 


Trouble 

1) description; The trouble which is repcrted 
to supply and maintenance center by the 
users of equipment. Equipment may not have 
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Me 


any trouble. it might be for periodic main- 
tenance and calibration. 

11) value class: EQUIPMENT TROUBLE 

P27) mandatory 


1v) pultivalued 


f) Regparts 
1) description: To keep track of the replace- 
Ment fart needs, we included the required 
parts which are needed to repair the egquip- 
ment. 
11) value class: PART_NO 
1ii) asultivalued 
gq) Eaiad 
1) description:Installation id code that the 
eguipment belongs.This information is needed 
to send the equipment back to its owner. 
235 value class: INSTALLATION _ID 
1ii) mandatory 


h) Owner 
i) description: This is the owner of the eguip- 
Ment. This is the in base address cf the 
cwner. 
2A) value class: EQP_OWNER 


Identifiers: Egp_no + Arrival_date + Owner 


BH. CCUBSES 


1. 


description: Includes all courses offered by Air 
Force command in the past, present and future tine. 
This informaticn will provide planning and choosing 
the persons who will participate to these courses. 


ai 


2. member attributes: 


a) Course_no 
1) description: Each course has a unigue numter 
which is related with its topic. 
ii) value class: CCURSENO 


iii) mandatory 


br) Ccurse_nane 
1) value class: COURSENAME 


1i) mandatory 


c) Course_location 
i) value class: COURSELOCATION 
ii) mandatory 


111) multivalued 


d) Number_of_hcurs 
i) value class: COURSE_PERIOD 


ae) mandatory 


e) Start_date 


i) value class: LATE 


£) Participants 
1) description; Names of the personnel whe did 
or will attend to this course. 
11) value class: PARTICIPANT'S NAME 


111) multivalued 


3. Identifiers: Ccurse_no 


Ne. STRING TYPES 


Now we should define the string types for those treccrds. 


Strings are following. 


ao 


WEAPCN_TYEE 


ilnterclass ccnnection: Subclass of STRINGS where 
format is 5-alphanumeric character string. Slash and 
dash can be included in string. 


FRIEND FOE 


interclass occnnection: Subclass of STRINGS where 
format 1s 3-alpha character string.The values are 
€ither FRD or FOE. 


RANGE 


interclass ccnnection: Subclass of STRINGS where 


value is positive integer less than 25,000. 


FUEL 


interclass connection: Subclass of STRINGS where the 


value 1s fositive integers less than 30,000. 
MAX_LOAD 


interclass ccnnection: Subclass of STRINGS where 


value is positive integer less than 100,000. 
NUMEER_OF_WEAEFCNS 


interclass ccnnection: Subclass of STRINGS where 


value is in keéetween 0..10,000. 
LATE 


luterclass occnnection: Subclass of STRINGS where 
format is ddmmyy where dd=1..31;mm=1..12 and 
yy=0..99. 


ANMC_CATEGORY 
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10. 


11. 


12. 


Ned « 


14. 


5 . 


16. 


PateLcclass ccpnnecti on: Subclass of STRINGS where 
fcrmat is single letter string in A..G. 


WARHEAD CAT 


interclass connection: Subclass of STRINGS where the 


value is in 1..10. 
NAME 


interclass connection: Subclass of STRINGS where 


fermat is 10-letter character string. 


ADDRESS 
interclass ccnnection: Subclass of STRINGS where 
format is 15-ch/street; 10-ch/apt; 4Y-digit/no; 


10-ch/city; 2-ch/state; 5-digit/zip; 
GRACLYEAR_VCEGREE 


interclass connection: Subclass of STRINGS where 
format is yyyyyddd where yyyy represents the year,ddd 


represents the graduation degree. 
LCCATIONS 


interclass ccnnection: Subclass of STRINGS where 


fermat is 4-digit number, which is installation id. 
RANK 


interclass connection: Subclass of STRINGS where 


format is 10-ch long string. 
SFECIALTY 


ilnterclass occnnecticn: Subclass of STRINGS where 


fcrmat is 4-digit string. 


MAR STATUS 
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18. 


19. 


ZO 


21. 


pee. 


254 


interclass ccnnection: Subclass of STRINGS where 


format is single character which is amg{s;upe) 


NAME_OCCUPATICN 

interclass ccnnection: Subclass of STRINGS where 
fermat is concatenation of 25-Ch name/lastname string 
and 10-Ch long cccupation string. 

NAME_SCHOOL 

interclass connection: Subclass of STRINGS where 
format 1S concatenation of 15-Ch name string and 3-Ch 
school string which is in (ELM,HIG,COL). 

LANGUAGE LEVEL 

lnterclass ccnnection: Subclass of STRINGS where 
icprmat is 4-Ch string which are in 
{(FOOR,FAIR, GOCL, EXCL). 

FAY_GRADE 

interclass ccnnection: Subclass of STRINGS where 
format is dd/l where dd is in 1..13 and 1 in 1..4. 
PUNISHMENT 

interclass ccnnection: Subclass of STRINGS where 
format is 15-Ch string. 

AWARITS_RECEIVEL 

ilnterclass occnnection: Subclass of STRINGS where 
format is 10-Ch string. 

COURSE_DATE 


interclass ccnnection: Subclass of STRINGS where 
fermat is G—digue course no /ddunyy where 
dd=1..3 1 sig=1.5 723) -Cc oe 
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24. 


Zs 


26. 


27. 


28. 


29. 


30. 


Se 1. 


HEALTH STATUS 


interclass ccnnection: Subclass of STRINGS where 


format is 25-Ch long string. 
INSTALLATION_ID 


interclass connection: Subclass of STRINGS where 


format is 4-digit string. 
ITYPE_NUM 


interclass ccnnection: Subclass of STRINGS where 
format is 5-alphanumeric character string /4-digit 


character string. 
ANTITYPE_NUM 


interclass ccnnection: Subclass of STRINGS where 
t 
format is S5~alphanumeric character string /2-digit 


character string. 
ANTIAIRCRAFT_LCCATION 


interclass connection: subclass of STRINGS where the 
format is dd:nmn;ss/d where dd=1..360- nn= 1... 60; 


ss=1..60; and dis either E or W. 
WEATHER STATUS 


interclass connection: Subclass of STRINGS where 
format is 4-Ch long strings which are POOR, FAIR, 
GCCD. 


UNOPRTYPE_NUM 


interclass ccnnection: Subclass of STRINGS where 
fcrmat 1s 4-alphanumeric character string / 2-digit 
number. 


NUMEER_OF_PERSCNNEL 
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as 


34. 


Bi. 


36. 


Baie 


38. 


interclass ccnnection: Subclass of STRINGS where 
format is 4<digit strings ani ee 
NAVIGATION STATUS 


interclass connection: Subclass of STRINGS where 


fermat is 1i-letter strings in (A,B,C,D). 
INSTALLATION CATEGORY 


interclass ccnnection: Subclass of STRINGS where 


fcrmat is 1i-letter strings in (A,B,C,D,E). 
PART_NO 


interclass connection: Succlass of STRINGS where 


format is 1S xXxx-xxxx-xxx;x is a digit. 
PART_NAME 


interclass ccnnection: Subclass of STRINGS where 


fcrmat is 15-Ch long string. 
LCCATION_NUMBEF 


interclass ccnnection: Subclass of STRINGS where 
fecrmat is dddd/fllll where dddd is installation id 
code d is a digit;llll is the number of this part in 
that location. Lili sis 19, 12.9995. 


NAME ADDRESS 


interclass ccnnection;: Subclass of STRINGS where 
format is 15-Ch name,last name;10-Ch/street;4-digit/ 
no;10-Ch/city;10-Ch/state; 5-digit/zip. 


ITEM PRICE 


lnterclass occnnection: Subclass of STRINGS where 
format is ddddddddd.dd where d's are digits. 
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yeh 


40. 


41. 


42. 


43. 


G4. 


45. 


46. 


7. 


ECULEMENT_ NO 


interclass connection; Subclass of STRINGS 


fcormat is xxx-xxxx-xxx where x's are digits. 
ECUIFMENT_NAME 


interclass occnnection: Subclass of STRINGS 


fermat is 15-CE long string. 
ECP CATEGORY 


interclass ccnnection: Subclass of STRINGS 


format is 4-Ch long string. 
ECUIPMENT _TROUELE 


interclass ccnnection: Subclass of STRINGS 


format is 15-alpha Character long string. 
ECP_CWNER 


interclass ccnnection: Subclass of STRINGS 


fcrmat is 15- alpha Character long string. 
COCURSENO 


interclass ccnnection: Subclass of STRINGS 


fcrmat is 4-digit string. 
CCURSENAME 


interclass ccnnection: Subclass of STRINGS 


fcrmat is 15-alpha Character string. 
CCURSELOCATION 


interclass ccnnection: Subclass of STRINGS 


format is 10-alpha Character long string. 


CCURSE_PERIOD 
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where 


where 


where 


where 


where 


where 


where 


where 


48. 


interclass Cenhnectior. Subclass of STRINGS’ where 
value is in 10..1000. 


PARTICIPANT'S_NAME 


1nterclass ccnnection: Subclass of STRINGS where 


format is 10-alpha Character name/10-alpha Character 
last name. 


66 


Ve. NETWORK CONSIDERATIONS 


A. INTRCDUCTION 


The cld model a single computer serving all of the orga- 
hization's computaticnal needs 1S rapidly being replaced by 
one in which a large number of separate but interconnected 
computers do the jot. These systems are called computer 
networks. Iwo computers are said to be interconnected if 
they are capable of exchanging information. By requiring 
that the computers be autonomous, we exclude from our defi- 
hition systems in which there is a clear master/slave rela- 
tion. In our view a distributed system is a special case of 
a network, one with ahigh degree of cohesiveness and 
transperancy. 

In our information system we need a great deal of infor- 
mation exchange between the units. Since the system elements 
located geographically dispersed in order to exchange infor- 
mation than we need to design an information network between 
the units. This network will accomplish our system gcals, 


which have reen previcusly stated. 


B. HETWCRK GOALS 


Air forces will have a substantial number of computers 
in operation, located far apart. Initially each of these 
computers may have wcrked in isolation from the other ones, 
at a certain time AFCOM may decide to connect them to be 
able to extract or ccrrelate irformation about the entire 
system. This goal is to make all programs, data and ctker 
resources available to anycne on the network without 
regarding to the physical location of the resource and the 


user. Load sharing is another aspect of resource sharing. 
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In air forces envirorment system elements frequently request 
information from other ones and need some remote gueries or 
update remote databases. All these processes need a way to 
accomplish these jots. This way is a well-established 
information network. 

A second goal is to provide high reliability by having 
the alternative scurces of supply. With unconnected 
computers if a machine goes down due to hardware failure, 
even thcugh there may be substantial computing capacity 
available elsewhere. With a network the temporary loss of 
Single ccmputer is much less serious, because its users can 
often be accomadated elsewhere until service is restored. In 
our system a cogplete loss of computing power for evena 
few hcurs due to some catastrophe, natural or otherwise is 
completely intolerable. 

Another important reason for distributing computer fower 
has to do with the relative price of computation versus 
communication. Until about 1970 computers were relatively 
expensive compared with communication facilities. The 
reverse 1S now true. In our system application data are 
generated at widely scattered points. Prior to 1970, it was 
not feasible to fut the computer at each location to analyze 
the data LTecause the computers were so expensive. Instead, 
all the data are transmitted to a central computer some- 
where. New the cost cf a small computer is negligible, so it 
bkecomes attractive to analyze the data at the place where 
it is cagtured, and cnly send occasional summaries back to 
computer center, to reduce the communication cost, which now 
represents a larger fercentage of the total cost than it is 
used to. This apfroach results in a computer network. 

Yet another goal of setting up a computer network has 
little tc do with networking at all. As a side effect of its 
other gcals, a computer network can provide a_ fowerful 


communication medium among widely separated people. Using a 
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netwcerk it is easy for two Or more unit which are far apart 
to write a report, send a message. When a change occurs the 
cthers can get the change immediately, instead of waiting 
for a long period of time. 

Another major attraction building a large system by 
coupling large number of smaller Machines is the expectation 
of a simpler software design. In our system it is [fossiktle 
to dedicate some (cr all) ot the processors to the 


specialized functions for example database management. 
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Figure 5.1 Classification Of Interconnected Processors. 
By eliginating the multiprogramming, we can also elimi- 


Nhate much of the software complexity associated with the 


large mainframes. 


GW 


In figure 5.1 we give a classification of muitifle 
Frocess syStems arranged by physical size. At the tof are 
data flow machines, highly farallel computers with many 
functional wnits all working on the same program. Next come 
the multiprocessers, systems that Communicate by exchanging 
messages. Finally the connection of two or more distant 
network is called internetworking. In our application our 
system can be classified as the long haul network. Since 
there is only one network is established for whole systen. 


C. NETWCRK STRUCTURE 


In any network there exist a collection of machines 
intended for running user programs. These machines are 
called hosts. For instance in our system AFCOM, TAF1, TAF2, 
and ¢ach of the bases‘ are the hosts. The hosts are 
connected by the communication subnet. The job of the subnet 
is tc carry messages from host to host. By separating the 
pure communication asrects of the network from the applica- 
tion asj;ects the complete network design is greatly 
Simplified. 

In all networks the subnet consists of two basic ccmfo- 
nents: Switching elements and transmission lines. The 
Switching elements might be specialized computers. We will 
call them IMPs (interface message processors). Transmissicn 


lines are called circuits or channels 


In figure $2, each host is connected to one IMP. All 
traffic to cr from tke host goes via its IMP. 

Broadly speaking there are two general types of designs 
for the communication subnet. 


1. Foint-To-Point channels 


The network ccntains numerous cables on leased tele- 


Fhone lines, each one connecting a pair of IMPs. If two IMPs 
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Figure 5.2 Communication Subnet. 


that de not share a cable nevertheless wish to communicate 
they must do this indirectly via other IMPs. When a message 
is sent from one IMP to another IMP via one or more interume- 
diate IMFs the message is received at each intermediate IMP, 
in its entirety, stored there until the reguired output line 
is free, and then forwarded. A subnet using this princifle 
is called point-to-point or store-and-forward subnet. In cur 
systemp we will use tkis kind of communication. Since some 
units need not to communicate directly with AFCOM in systen 
hierarchy. We will take a close look at to this sukject wken 
we consider network tcfology. 
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The second kind of communication architecture uses 
broadcasting. In this design there is a single communica- 
tion channel shared by all IMPs. Inherent in broadcast 
system is that messaces sent Ly any IMP are received by all 
cther IMFs. Something in the message itself must specify for 
whom it is intended. After receiving a message not intended 
for itself, an IMP just ignores it. The post important issue 
in brcadcast channels is the lack of privacy. Privacy is an 
important system aspect in our design. Thus we can not use 
broadcast channels in our design. 


D. HETWCRK TOPOLOGY 


The goal of the topological design is to achieve a spec- 
ified yferformance ata Minimal cost. There are no exact 
solutions in this tusiness. Trial and error plus the 
services of a large ccmputer are essential. The preblem is 
so immense that the cnly reasonable apfroach is to generate 
a potential network topology and then see if it otkeys the 
connectivity and delay constraints. If not generate another 
one, until a feasible one is found. In our system design 
constraints we should first consider the interactions among 
the units. Since ovr system's nature is hierarchical and 
then we should first this at one Side. Then, we should look 
at the ccmmunication issues. We have said that the broadcast 
communicaticn is not suitable due to lack of its privacy. 
And the most important issue is the design consideraticn of 
the datakases. Since we have designed the databases of the 
sub levels as a subschemas of the upper levels, subunits 
need not to communicate directly to the upmost level. first 
we shculd look at the point-to-point interconnection 
topolcgy tyfes. 
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Figure 5.3 Possible Topology Types. 


In Figure 5.3 we see several possible topologies. 
Among these topologies tree structure is the most appro- 
Friate ore to satisfy our system constraints. This topology 
permits us to igplement our network in a hierarchical way. 
In this structure each subunit can communicate with one- 
level higher unit. If this unit wants to get, or send any 
information from or te higher level units, it should do this 
via intermediate levels. For instance if a base would like 
to retrieve a record from AFCOM's database it should do this 
via its ordinate TAF. And, also if TAF1 would like to senda 
message to TAF2, then it should send this message via AFCOM, 
then AFCCM can transmit this message to TAF2. THis is very 


important in terms of network design, because this will 
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greatly sirflify the design of network. Besides there is a 
great need to establish a connection among the supply and 
maintenance centers. Eecause the traffic is very heavy amcng 
these subunits, if we do not set up interface for these 
subunits then we can greatly reduce the overall systen 
throughput. Also supply and maintenance centers pass very 
bkurstly information to each other. But the other systen 
compcnents will not have this big jobs to be interacted with 
€ach cther subunits. 


Ee. DESIGN ISSUES 


The first design decision is the rules for data 
transfer. Do data cnly travel in one direction called 
Simplex communication, or can they travel in either direc- 
tion, but not simultanequsly called half duplex communica- 
tion, cr can they travel in both directions at once, called 
full duplex communication? For our system half duplex connu- 
Nication is enough. Since, we Lave established an interface 
among the supply and maintenance centers, this will reduce 
the traffic. Thus the half duplex communication is 
preferartle tesides it 1s simple and efficient method. 

The frotocol must determine how many logical channels 
the ccnnection corresponds to, and what their properties 
are. In our information network provides two logical chan- 
nels fer connection one for normal data and one for urgent 
data. 

Errcr ccntrol is an important issue when the fhysical 
communicaticn circuits are not perfect. many error detecting 
and correcting codes are known, but both ends of the connec- 
tion must agree on which one is being used (we will look at 
to this issue later inthis chapter). In addition the 
receiver, must have some way of telling the sender which 


messages have been correctly received and which have nct. 
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Not all communications channels preserve the crder of 
the messages sent on them. To deal with a possible loss of 
sequencing the protoccl must make explicit provision for the 
receiver tc allow the pieces to be put back together 
properly. 

An issue that cccurs frequently is how to keep a fast 
transmitter from swamping a slow receiver with data. Some 
kind of feedback frem the receiver to the sender can be 
established related with receiver's current situation. 

When there are multiple faths possible between source 
and destination at some point in the hierarchy, a rcuting 
decision must be madé. Also we will look at to this issue 
later in this chapter. para;All these are very important 
issues related with the system's performance. We should 
consider these issues very carefully when we are designing 


our systen. 


Fo. NETWCRK ARCHITECTURES 


To reduce the network design complexity, most networks 
are organized asa series of layers or levels, each cne 
built upcn its predecessor. The number of layers the name 
cf each layer and the function of each layer differ from 
network to network. However in ali networks the purpose of 
each layer is to cffer certain services to the higher 
layers, shielding these layers from the details of how the 
cffered services are actually implemented. Layer n on one 
machine carrieS on aconversation with layer n on anotter 
machine. The layers and convention used in this conversation 
are collectively knewn as_ the layer on _ protocol, as 
illustrated in Figure 5.4 for a seven layer network. 

In reality no data are directly transformed from layer 
Non one machine to layer n on another machine (except in 
the lowest layer). Instead each layer passes data and 


nS 


Layer 


i 


Layer 6/7 interface 


Layer 


i 


Layer 5/6 interface 


Layer 


Le 


Layer 4/5 interface 


Layer 4 


Layer 3/4 interface 


Layer 


i 


Layer 2/3 interface 


Layer 


ry 


Layer 7 protocol 


<a] ee Layer 


Layer6 protocol 


ce--—— | ~S saver 


Layer5 protocol 


— os a 1. Layer 


Layer4 protocol 
—bKV—-—--—-— } oy 6CLayer 


Layera = pretocer 


“ek---—--—--+% Layer 


Layer2 protecel 
—-—-—-—+ > Layer 


Layer 1/2 interface 


Layer l 


br 
rw 
QO 
SG 
4 
© 
wn 
—_ 


Layerl protocol 


i 


V 


ee 
fu 
K< 

40) 

K 

{~ 


ISO Seven Layer Architecture. 


76 


l 





control information to the layer immediately below it, until 
the lcwest layer is reached. At the lowest layer there is 
physical Communicaticn with the other machine as ofposed to 
the virtual communication used by the higher levels. In 
Figure 5.4, virtual communication is Shown in by dotted 
lines and the physical communication is shown by the solid 
lines. 

Between each pair of adjacent layers there is an inter- 
face. The interface defines which primitive operations and 
services the lower layer offers to the upper one. When we 
decide how many layers to include a network and what each 
one should do one of the most important considerations is 
having cleanly defined interfaces between the layers. Having 
cleanly defined interfaces in turn reguires that each layer 
perform a specific ccllection of well understood functicns. 

The set of layers and protocols is called network archi- 
tecture. the specification of the architecture must ccntain 
enough information tc allow an implementer to write the 
Frogram for each layer so that the program for each layer so 
that the fprogran will correctly obey the appropriate 
protocol. 

We will only consider the ISO (International standards 
organizaticn ) seven layer model. We will not look at the 
cther architectures like ARPANET, IBM's SNA, and DEC’s 
TECNET. Now we should look at the layers of ISO model. 


1. Ike Physical layer 


The physical layer is concerned with transmitting 
Taw Fits over a commzunication channel. Typical guestions 
here are how many volts should be used to represent a 1, and 
how Many microseconds a bit occupies, whether transmission 
May proceed simultaneously in both directions, how the 
initial connection is established and how it is torn dewn 


when foth sides are finished, how many pins’ the network 
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connector has and what each fin is used for. We will use 
the leased telephone lines aS physical connections among the 


hosts. 


The task of the data link layer is to take a raw 
transmission facility and transform it into a line that 
appears free of transmission errors to the network layer. It 
accomplishes this task done by breaking the input data up 
into data frames, transmitting the frames sequentially and 
Frocessing the ackncwledgement frames sent back by the 
receiver. Since layer 1 merely accepts and transmits a 
stream of bits without any regard to meaning or structure, 
it is up te the data link layer to create and recognize 
frame bcundaries. This can be accomplished by attaching 
special Fit patterns to the beginning and the end of the 
frame. 

A noise burst on the line can destroy a frame 
completely. In this case the layer 2 software on the scurce 
machine must retransmit the frame. Another issue that arises 
at layer 2 is how to keep a fast transmitter from drcwning 
a slow receiver in data. A mechanism must be employed to let 
the transmitter know how much butfer space the receiver at 


the moment. 


3. The Network Layer 


the network layer ccntrols the operation of the 
subnet. Amgcng other things, it determines the chief charac- 
teristics of the the IMP host interface and how packets the 
units cf information exchanged in layer 3 are routed with in 
the subnet. A major design issue here is the division of 
labor between the IMFs and Hosts, in particular whe stould 
ensure that all packets are correctly received at their 


destinations, and in the proper order. What this layer 
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software does basically is accept messages from the scurce 
host, convert them to packets and see to it that the packets 
get directed toward the destination. A key design issue is 
how the route is determined. We will consider this issue 


later in this chapter. 
4. dhe Transport Layer 


The basic function of the transport layer also known 
host-to-hest layer is to accept data from the session layer 
split it up into smaller units, if need be pass these to the 
network layer, and ensure that the pieces all arrive at the 
cther hand. 

the transport layer also determines what type of 
service to provide the session layer, and ultimately the 
users cf network. The most popular type of transport connec- 
tion is error free (virtual) point-to-point channel that 
delivers message in the order in which they were sent. 

Although the network architecture specifies nothing 
about the implementation, it is worth pointing out that the 
transfert layer is often isplemented by a part of the host 
cperating system, which we will call a transport station. In 
contrast the network layer is typically implemented in the 
host Ey an input/outfut driver. The data link and physical 
layers are normally implemented in hardware. 


Se Ihe Session Layer 


«=pe2 oo 


The session layer is the user's interface into the 
network. It is with this layer that the user must negotiate 
to estaklish a ccnnection with a process on ancther 
machine. Once the connection has been established _ the 
session layer can manage the dialog in an orderly manner if 
the user has requested that service. A connection retween 
users 1s usually called session. A a session might be used 


to allcw a user to log into a remote time sharing system or 
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to transfer a file Fetween two machines. To establish a 
session the user must provide the remote address he wants to 
connect to. Session addresses are intended for use ky users 
or their programs whereas transport addresses are intended 
for the use by transport stations, so the session layer must 
be aktle to convert a sessicn address to its transport 


address, to request that a transport connection be set up. 


6. Zhe Presentaticn Layer 


the presentaticn layer performs functions that are 
requested sufficiently often to warrant finding a general 
solution for then, rather than letting each user solve the 
problems. These functions can often be performed by litrary 
routines called by the user. 

A typical example of a transformation service that 
can be performed here is:text compression. The presentation 
layer could be designed to accept ASCII strings as input and 
produce ccmpressed bit patterns as output. 

This layer can also perform other transformatiors in 
additicn to message compression. Encryption 1S one possi- 
bility. Conversion keétween character codes, line and screen 
length, end of line convention, scroll versus page mode, 
character setS and cursor addressing are but a few of the 
many problems. The representation layer attempts to 
alleviate these froblenms. 


7. %Ihe Application Layer 


The content cf the application layer is up to the 
individual user. When two user programs on different 
machines communicate they alone determine the set of allowed 
messages and the action taken upon receipt of each. 
Nevertheless there are many issues that occur here that are 
guiet general. 


80 


It is generally inadvisable to create cur. cwn 
network software. The job inevitably seems to take much 
more programming time than anticipated. A do-it- yourself 
approach may be seen reasonable for simple point-to-point or 
dial telephcne lines Fetween processors. But our system can 
grow rapidly in a few years. Thus this kind of more complex 
forms of transport network will need complex software. These 
are sufficiently complex that a do-it yourself approach is 
not advisalle. 

A full-function architecture for distrikuted 
processing from a given manufacturer should do everything 
listed in this section. So we will look at only designing 
issues rather than designing our network software. [Ref. 4] 


A message 1S a group of bits sent as a Single ccnnu- 
nication retween two machines. It is possible that for tech- 
nical reasons, a message may be divided into separate blocks 
for transmission (scmetimes called packets). If that 
happens, the message will re reassembled before it is given 
to the process which uses it. 

A transacticn consists of the data which fcrm a 
Fasic unit of work for the application in guestion. To 
complete one transaction several messages may have tc go 
Fack and forth. 

A group of transactions is sometimes sent together 
ln one transmission, for example from a peripheral processor 
used for data entry. This is rererred as a batch. It may 
sent as multiple transmitted blocks, depending on what -Llock 


size gives the most efficient transmission. 
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8. Line Control 


Teleprocessing needs a line control procedure to 


perform the following functions: 


1. Indicate start and end of a message. 

2- send an address with the message so that it goes 
to the requisite device. 

3. Detect transmission errors. 

4. Initiate retransmission of messages in error, or 
messages failed to arrive. 

5. Maintain line discipline to ensure that two 
devices do not transmit at once, and garkle each 
other's message. 

The designer selected processors to be interlinked 

Must ensure that they use exactly compatible line-control 
procedures. Some line control procedures such as start-stop 
control with with the CCITT alphabet No.5(ASCII) [Ref. 5] 
IBM's SQPLC [Ref. 6] 1s a subset of HDLC. Most other 
manufacturers have their own version of HDLC. 


9. Code Selecticn 


To communicate the frocessors selected must be able 
to use not only the same line ccntrol procedure but also the 
same character set, possibly the ASCII code or CCITT 
Alphaket No.5. If we buy IBM's products then we have to use 
FECEIC: 


10. Message Header 


A variety of control information may be carried in 
the header of each message. The system designer whe has 
elected to use conventional teleprocessing rather than a 
hetwork architecture must determine what informaticn is 
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needed in the message headers. The following are some of the 
types of header information that might be necessary: 


ae TYPE OF MESSAGE 


Often a machine will receive more than cne type 
of message. The header should be indicate the type fossibkly 


one EFyte. 
Er. DESTINATICN ADDRESS 


In our system message can travel over more than 
cne physical links. A destination address is needed to tell 


the concentrater or Switch where to route the message. 
ce SOURCE ALTRESS 


The receiving processor needs to know where a 
message has come from. If it has traveled more than one link 
via a concentrater or switch, it must carry the address of 


its source. this address is placed in any response messages. 
d- MESSAGE SERIAL NUMBER 


The messages may Le given a sequential number. 


This nay te used for the following purposes: 


1. For that no message is lost. 

2. For associating a response with the message 
trigsering that response. 

3. If a long message is split into blcck or 
packets for reassembling that message. 

4G. For identifying a message for audit 
purftcses. 


e. TRANSACTICN SERIAL NUMBER 


When several messages are involved in one trans- 


action, the transaction may be given a serial numter rather 
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than irdividual messages. This enables the transacticn to be 
traced and referred for audit, testing or retrieval 
purposes. If it is fossible for one message within a trans- 
action to be missing the message within a transaction may be 


numoered. 


f. CHAINING INDICATOR 


If a trarsaction can be split into messages a 
chaining indicator may indicate that more messages will 
follow in that transaction. Two bits are sometimes used in 
the chaining indicator, having the following meanings: 


1. First message in transaction. 
2. Middle message. 

3. Last message in transaction. 
4. Only message in transaction. 


ge MESSAGE REASSEMBLY INDICATOR 


If a long message is chopped up into blocks or 
packets, sufficient information must be included to reas- 
semble the message and detect whether any packet is lost. 
This is usually dcne with a chaining indicator and 


seguential rumber. 
h. RESPONSE INDICATOR 


Sometimes when a processor sends a message, it 
requires a response; It may be programmed to wait until it 
receives a response. In this case it should send an indica- 
tion in the message Saying that it is waiting. A 2-bit 


indicator is sometimes used having the following meaning: 


1. No response expected. 

2. A response must be sent to this message. 

3. A response must be sent to this chain of 
messages after the last message in the 


chain is indicated. 
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4. A message May OL may not be sent. 


1. TIME AND LATA STAMF 


We need tc know the time and the date of the 
messages that they were sent. This is used for reference and 
audit purpeses. Thus the messages should be marked to 
indicate the time and date they were sent. 


je BATCH CONTROLS 


In our system we uSually transmit a batch of 
transactions rather than individual transactions. 
Demarcaticn controls are needed in the batch to indicate the 
start and end of individual records or transactions and the 
end of fatch. At the end of the batch a control record 
should be sent so that the receiving machine can check that 
the transactions received are complete and accurate. This 
control record may ccntain a count of the transactions anda 
hash total. 

The receiving machine adds up this total and 
ensures that it agrees with the total written by the 


transpitting machine in the ccntrol record. 


11. Centrol Messages 


To regulate the transfer of information and deal 
with exception conditions, certain messages are needed which 
do not carry application data but which are control signals. 
The following tyres cf control messages are used: 


ae READY TO EEGIN 


One machine signals to another that it is ready 


to receive transmissicn. 
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EK. NOT READY 


A machine indicates that it is not at the moment 


that it is ready to receive. 
GC. REQUEST PERMISSION TO TRASH ee 


One machine contacts another, requesting fermis- 


sion to transmit. 


ds.  REGMECI 
One machine rejects the transmission from 
another, indicating the reason. The rejection will not 


normally re due to a transmission error because these are 
detected and dealt with by the line control procedure. ie 
will te a validity error or failure message of some type. 


€. RETRANSMISSION REQUEST 


The recéiving machine reguest that a message 
with a given number be resent; or possibly all messages 
after a given number. This may ke necessitated by a machine 
or line failure of some type. 


£.. INTE RRWES 


One processor may send an urgent message to 


interru,;t another prccessor. 
g. INITIATE SESSION 


Various types of message may be interchanged to 
initiate a session between two machines or to check that the 
messages have permission and have the resources to communi- 
cate. Security checks may be necessary before the session 


Cah CCMMENCE. 
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12. Compaction 


If transmissicn efficiency is a major concern, data 
may be ccmpressed before transmission. This can reduce the 
number cf bits by cne third or one half [Ref. 7] The 
compressed message will be restored to its original form at 
the cther end of the link Lrefore use. The compression and 
expansion may be done by software in the using computers. 
Like cryptography, it may also be done by intelligent 
hardware external to the computer [Ref. 1] 


Ge. RCUTING 


The routing algorithm is that part of the network layer 
software, responsitle for deciding which output line an 
incoming packet should transmitted on. 

Regardless of wkether routes are chosen independently 
for each packet or just at the start of new sessions, there 
are certain properties that are desirable in a routing algo- 
ritam:; correctness, Simplicity, robustness, stability, 
fairness, and optimality. 

Once a retwork ccmes on the air, it may be expected to 
run continuously for years without system-wide failures. 
During that time there will be hardware and software fail- 
ures of all kinds. Hosts, IMPs and lines will go uf and 
down repeatedly and the topology will change many times. The 
routing algcrithm must be able to cope with changes in the 
topoiogy and traffic without requiring all jobs in all hosts 
to be aborted and the network to be rebooted every time scme 
IMP crashes. 

AS a ccmpromise many networks attempt to minimize the 
humber of the hops tends to improve the delay and also 
reduce the amount of bandwidth consuned, which tends to 
improve tke throughput as well. 
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Rcuting algorithms can be classed into two classes: 
nonadaptive and adaptive. Nonadaptive algorithms do not base 
their reuting decisions and measurements or eStimates of 
the current topology and traffic whereas the adaptive ones 
do. Adaptive algorithms can further be subdivided into 
centralized, isolated, and distributed [Ref. 8] 

We will not here look at all routing algorithms. We will 
only lock at the static routing which meets all cf cur 
design spfecifications. Since our network does not have too 
Many ncedées and static routing is the simplest one. Besides 
it we can make a good estimate about alternate routes, 
static routing can be the most efficient one for our system. 
Fortunately we have small number of nodes which permit us to 


make a gcod estimaticn on alternate routes. 
1. Static Rieutang 


Static or directory routing is a simple algorithm 
and one cf the most widely used. Each IMP maintains a tatle 
with one rcew for each destination IMP. A row gives the best, 
second best, third test and so on, outgoing line for that 
destination, together with a relative weight. Before 
forwarding a packet, an IMP generates a random number and 
then chocses among the alternatives, using the weights as 
probarkilities. The tables are normally worked out by the 
network operators, loaded into the IMPs before the netwcrk 
is brought up, and nct changed there after. 

Actually in our network we don't have a big routing 
problem. Since the hcsts do not have more than one connec- 
tion at any level. Thus if TAF1 would like to send a facket 
to TAF2 there is only one route via AFCOM. It is obvious 
that we don't need to determine which route is better than 
the others. In futtre if we make a lateral connections in 
this network then we will have a serious routing probleg. In 


that case we should reconsider these routing issues. 
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The only proklem with static routing is the determi- 
nation of weights for each route. This job should nct tLe ad 
hoc. A Fetter althcugh more complicated way to choose the 
routes explicitly minimize the mean packet time [Ref. 9] 

Static directory routing can give good performance 
if the tcpelogy and the traffic do not change much. It also 
makes good use of existing bandwidth by using alternative 


routes. 


H. TRABSSISSION ERRCES 


Transmission errors are the fact of life. Network 
designers have develcped two basic strategies for dealing 
with errers. One way is to include enough redundant infcrma- 
tion along with each block of data sent to enable to the 
receiver to deduce what the transmitted character must have 
keen. Tke other way is only to include enough redundancy to 
allow the receiver to deduce that an error occured but not 
which error, and have it request a transmission. The first 
strateyy 1s error correcting codes, and second uses error 


detecting codes. 


1. Errer Correcting Codes 


A message consists of m message bits, and c check 
kits. Let the total length be n. Ann bit unit ccntaining 
data and check bits is often referred to as an n bit code- 
word. The error detecting and correcting properties ofa 
code depend on its Hamming distance [Ref. 10] The number of 
rit positions in which two codewords differ is called the 
Hamming distance d apart, it will require d single-bit 
errors tc convert one into the other. To detect d errers, we 
need a distance d+1 ccdeword because with such a code there 
1s no way that d single-bit error can change a valid code- 


word intc another valid codeword. When the receiver sees an 
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invalid codeword, it can tell that a transmission error has 
cccured. Similarly to correct d errors we need a 2d+1 code 
recause that way the legal codewords are so far apart that 
even with d changes, the original codeword is still closer 
than any other codewcrd, so it can be iuniguely determined. 

The bits of the codeword are numbered consecutively 
starting with bit 1 at the left end. The bits that are fower 
of twe are checkbits. The rest are filled up with the o 
data bits. Each check bit forces the parity of some ccllec- 
tion of bits, including itself, to be even or odd. A 
message bit may be included in several parity computations. 
To seé€ which check bits the data bit in position k, contrib- 
utes the, rewrites k as the sum of powers of 2. For example, 
29=1+4+8+16. A bit is checked by just those check bits 
cccuritg in its expansion. When a codeword arrives, the 
receiver initializes a counter to zero. It then examines 
each ckeck kits, k te see if it has the correct parity. ae 
not it adds k to the counter. If the counter is zero after 
all tte check bits have been examined, the codeword is 
accepted as valid. If the counter is nonzero it contains the 
number cf incorrect fit. 

Hamming codes can only correct single errors. 
However there is a trick that can be used to permit Hamming 
codes to correct burst errors. A seguence of k consecutive 
codewerds are arranged as a matrix, one codeword fer row. 
Normally the data would be transmitted one codeword ata 
time, fcrm left to right. Te correct burst errors the data 
should be transmitted one column at a time starting with the 
leftmost column. When all k bits have been sent, the second 
column is send and so on. When the message arrives at the 
cther side the matrix is reccnstructed, one column ata 
time. If a burst error of length k occurs, 1 bit in each 
of the k words will have been affected, but the Hamming code 
can ccrrect one error per codeword, so the entire block can 


ke restored. 
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Error correcting codes are sometimes used for data 
transmission, for example when the channel is Simplex, so 
retransmission can nct be reguested, but most often error 
detection fcllowed by retransmission is preferred because it 
is more efficient. In practice a method is in widespread 
use; the polynomial code({also known as cyclic redundancy 
code or CRC ). Polyncmial codes are based upon treating the 
bit strings as representations of polynomials with coeffi- 
cients of 0 and 1 only. A k-bit message is regarded as the 
coefficient for a polynomial with k terms. Such a polynonial 
is said to be of degree k-1. For example, 11000 has five 
kits and thus represents a five term polynomial with coef- 
ficients 1, 1, 0, 0, and 0. Polynomial arithmetic is done 
module 2, according to the rules of algebraic field theory. 
There are no carries for addition and no borrows fo 1 
subtraction. Both subtraction and addition identical to 
exclusive or. 

When the polynomial code is used, the sender and 
receiver must agree upon a generator polynonial, G(x) in 
advance. Both the high and low order bits of the generator 
must fe 1. To compute the checksum for some messages with non 
bits, ccrresponding to the polynomial M(x)the message must 
ke lcnger than the pclynomial. The basic idea is to append a 
checksum to the end cf the message in such a way that the 
polyncemial represented by the checksummed message is divi- 
Sible by G(x). If there is a remainder, there has beena 
transmission error. 


The algorithm for computing the checksum is as follows: 


1. Let r be the degree of G(x). Append r zero bits 
to the lcw order end of the message, so it now 


contains omtr cEits. 
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2. Divide the string corresponding to G(X) antowene 
bit string correspending to r zero bits appended 
message. 

3. Subtract the remainder (which is always r or 
fewer bits ) from the bit string correspending 
to r zero bits appended message, using modulo 2 
subtraction. The result is the checksunmed 


message tc be transmitted. 


Ie CRYFTOLOGY 


Until the advent of computers, one of the main 

constraints on cryptography has been the ability of the code 
clerk to perform the necessary transformations, often a 
kattlefield with little equipment. An additional constraint 
has teen difficulty in switching over guickly one cryptcgra- 
phyic method to another ‘one since this entails retaining a 
large number of peofle. The danger of a code clerk keing 
captured by the enemy has made it essential to be able to 
change the cryptcgraphyic nethod instantly. These 
conflicting requirements have given rise to the model of 
Figure 5.5 . 
The messages to be encrypted known as the plaintext, are 
transformed by a function that is parameterized by a key. 
The cutput of the encryption process known as the cipher- 
text, is then transmitted by a messenger or radio. We assume 
that the enemy or intruder hears and accurately copies down 
the ccmplete ciphertext. Sometimes the intruder does not 
only listen to the ccmmunication channel but can also record 
messages and play back them later, inject his own messages, 
or modify legitimate messages before they get to the 
receiver. 

The key consists of a short strings of characters that 
selects cne of many fotential encryptions. In contrast the 
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Figure 5.5 Cryptographic Method. 


general method, which may be every few years, the keys can 
ke changed as often as reguired. Thus our basic model is a 
stable and publicly known general method parameterized bya 
secret and easily changed key. 

Encryption methods historically divided up into two 
categories: substitution ciphers and transposition cifhers. 
Now we will look at each of then. 


ike ubstitution Ciphers 


In a substitution cipher each letter oor group of 


letters is replaced Ly another letter or group of letters to 
disguise it. 
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First and the oldest cipher known is the CEASER 
Cipher. In this method each letter is substituted witha 
3-letter shifted one. For instance a becomes D, b becomes E£ 
and so on. A Slight generalization of this cipher allows the 
ciphertext alphaket tc be shifted by k letters, instead of 
always 3. In this case k becomes a key to the general method 
of circularly shifted alphabets. 

The next imprevement iS to have each of the synrbols 
in the plaintext, say 26 letters for Sinuplicity, eachuien 
onto scme other letter. For example, first row is a 
plaintext and the seccnd row is ciphertext. 


agEcde£ftEgh ijktl@wpnopgqetst V¥ ¥ were 
stlyhlopwbxuczaf£*oeould?j yy € @ kena 


This general system is called monoalphabetic sutsti- 
tution, with the key being the 26-letter string 
corresponding to the full alphabet. 

Given a surprisingly small amount of ciphertext, the 
cipher can te broken easily. The basic attacks take advan- 
tage of statistical properties of natural languages. IE}! 
english, for example, e is the most common letter, followed 
by t, a, 0, n, i. The most common letter combinaticns, or 
digrams, are: th, in, er, andan. The most common three 
letter ccmbinations, cr trigrams are: the, and, ion and end. 

A cryptanalyst trying to break a monoalfhaketic 
Cipher wculd start out by counting the relative freguencies 
of all letters in the ciphertext. Then he might tentatively 
asSign-the most commcn one to e and the next common cne to 
t. Then by making guesses at common letters digrams, and 
trigrams, cryptanalyst builds up a tentative plaintext 
letter Ly letter. 

To make the cryptanalyst's job more difficult, it is 
hecessary to smooth out the frequencies of the ciphertext, 
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so the letters representing e, t, do not stand out so 
clearly. One way of achieving this goal is to intreduce 
multiple cipher alphakets, to be used in rotation, giving 
what is knewn as a folyalphabetic cipher. AS an example 
consider the VIGENERE cipher. It consists of a square matrix 
containing 26 CEASER alphabet. The first row called rew A, 
is A EC... X ¥Y Z The next row is called row B, is ECD 
Paeteesece XY Z Ae The last row, called row Z, is Z ABCD... 
WX Y. 

like the moncalphabetic cipher, this cipher also has 
a key, tut instead of being a string of 26 distinct charac- 
ters, the key is usually a short, easy-to-remember word or 
phrase, such as FXTEFRESTRIAL. 


fe ee een eel eA fF At FE RR E S T R 


tacticalforceswillstaret 


The key letter above each plaintext letter tells 
which row to use for encryftion. The t is encrypted using 
the CEASER alphabet row E, then ais encrypted using the 
CEASER alphabet row X, and so on. 

A more powerful polyalphabetic cipher can be 
constructed by using arbitrary monoalphabetic ciphers for 
the rews instead of restricted them to CEASER ciphers. The 
only froklem with this scheme is that the 26x26 square table 
then kFeccmes part of the key and must also be memorized or 
written down. 

The next step up in the complexity for the cryftog- 
Trapher is tc use a lenger key than the plaintext. In fact, 
constructing an unbreakable cipher is easy. First choose a 
random bit string as a key. Then convert the plaintext into 
Seebit string for example using ASCII representation. 
Finally compute the EX-OR of these two strings, bit by bit. 
The resulting ciphertext cannot be broken, because every 
fossifle plaintext is an equally probable candidate. The 
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ciphertext gives the cryptanalyst no information at all. [In 
a sufficiently large sample of ciphertext, each letter will 
occur egually often, as will every digram and every trigran. 

This method is known as the one tine key, has a 
Rumber of fractical disadvantages, unfortunately. tTo start 
with, the key can not be memorized, so both sender and 
receiver must Carry a written copy with them. Written keys 
are undesirable. Additionally the total amount of data can 
ke transmitted is limited by the amount or key available. If 
the spy strikes it rich and discovers a wealth of data, he 
may find himself unakle to transmit it back to headquarters 
because the key has feen used up. Another problem is the 
sensitivity of the method to lest messages, or messages that 
arrive in the wrong crder. If the sender and the recéiver 
get out cf synchronization as to where in the key they are, 
they are in trouble. | 

SurEstitution ciphers need not always work one letter 
(or bit) ata time. For example PORTA'sS cipher uses 26x26 
table, like the VIGENERE cipher. The plaintext is encoded 
two characters at atime. The first character indicates a 
row, the second a column. The number of letter paid found at 
the intersection is the encrypted value. If 26 different 
tables are prepared, trigrams can be encrypted as units by 


uSing the first letter of each trigram to select a table. 
2. Codes 


As the units encrypted become longer and longer, the 
Cipher tegins to resemble a code. The main difference 
between a cipher and a code is that the former encrypts a 
fixed-size unit of flaintext with each operation, whereas 
the later encrypts a single variable-length linguistic unit, 
typically a single word or phrase. 

Codes have the disadvantage of requiring large 
Elocks, that can not be replaced as easily as the key toa 


0 


cipher. However they have the advantage of being harder to 
break than ciphers. Codes ard ciphers can te combined to 
make the cryptanalyst's life less pleasant. For example, 
encoding a message might yield a five-digit numbers. These 
numbers could be concatenated to form a digit sequence, that 
could than be encrypted using a polyalphabetic cipher. 
Fncipkering a coded message is called superencipherrent. 
Superenciphered codes are harder to break. 


3. Transposition Ciphers 


Substitution ciphers and codes preserve the crder of 
the plaintext but disguise them. Transposition cifhers, in 
contrast, reorder the letters but do not disguise then. 
Figure 5.6 depicts a common transposition cipher, the 
columnar transpositicn. The cipher is keyed by a_ word of 
phrase nct containing any repeated letters. In this examrle 
TROUBLE is the key. The purpose of the key is to number the 
columns, column 1 being under the key letter closest tc the 
start of alphabet, and so on. The plaintext is written hori- 
zontally, asa series of rows. The ciphertext is read out 
ky columns, starting with the column whose key is the 
lowest. 

To kreak a transpositicn cipher, the cryptanalyst 
must first be aware that he is dealing with a transposition 
Cipher. By looking at the frequency of e, t, a, 0, i, n, it 
is easy to see if they fit the normal pattern for plaintext. 
If so the cipher is clearly the transposition cipher, 
because in such a cipher every letter represents itself. 

Some transposition ciphers accept a fixed-length 
Flock of input and y;roduce a fixed-length block of output. 
These ciphers can be completely described by just givinga 
list teiling the order in which the characters are to be 
output. 
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While descriting the various classical cryptogra- 
phyic schemes, we have tried to make it clear how computers 
can be used as powerful tools by the cryptanalyst, both for 
collecting frequency statistics and for trying out large 
Numbers cf tentative solutions. We will think about making 
the encryption process so complicated that not even a 
computer can break it. 

Although modern cryptcgraphy uses the same [Easic 
ideas as traditional cryptography, transition and substitu- 
tion, its emphasis is different. Traditionally cryptographs 
used simple algorithms and relied on long keys fer their 
security nowadays reverse is true: the object is to make the 
encryption algorithm so complex. And involuted that even if 
the cryptanalyst acquires vast mounds of enciphered text of 
his cwn choosing, he will not be able to make any sense of 
if at cai 
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Figure 5.7 A: F-Box, B: S-Box, C: Cascade Ciphers. 


Iransposition and substitution can be done with 
Simple circuits. Figure 5.7 A, Shows a device known as 
F-box, used to effect a transposition on an 8-bit input. If 
the 8 kits are designated from top to bottom as 01234567, 
then the output of this particular p-box is 36071245. By 
appropriate internal wiring a p-box can be made to perform 
any transposition. Substitutions are performed by what are 
called s-boxes, as shcwn in Figure 5.7 B. In this example a 
3-bit plaintext is entered and a 3-bit ciphertext is output. 
The 3-bit input selects one of the lines exiting from the 
first stage and sets it to 1; all the other lines are 0. The 
second stage is a_ef-box. The third stage encodes the 
selected input line in binary again. With the wiring shown, 
if the eight octal numbers 01234567 were input one after 
another, the output seguence would be 24506713. Again by 
appropriate wiring of the p-box, any substitution can be 
accomplished. 

The real power of those basic elements only becomes 
when we cascade a whole series of ciphers, as shown in 
miegure 5.7 C. In this example, 12 input lines are trans- 
ported Fy the first stage. Theoretically, it would be 
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fossible to have the second stage be an S-box, that mrapreda 
12-bit number onto ancther 12-bit nugber. However, sucha 
device would need 2¥*4#12 = 4096 crossed wires in its middle 
stage. Instead the input is broken up into four groups of 3 
bits, e¢ach of which is substituted independently of the 
others. Although this method is less general, it is still 
powerful. By including a sufficiently large number of stages 
in the product cipher, the cutfut can be made to a nonlinear 
function of the input [Ref. 4] 

We kave talked about too much on cryptology so far, 
kecause of our system needs very tight security measures. It 
is okvious, that the cryptology is not only the way to 
prevent malicious act, to gain access to secret informaticn. 
We should alsc consider the overall system security and 
privacy. But we will not consider them in this thesis, since 
they are very wide subjects and depend on the particular 
application. 
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A. FRELIMINARY CONSILTERATIONS 


Minicomputers have historically lacked the power of 
Mainframes. Their lcwer price, however, made the systems 
ideal for dedicated tasks. Technological advances, quickly 
elevated minicomfuters to the class of standalone, general- 
purpose systems, and manufacturers began developing high-end 
miniccmputers with 32-Bit architectures to challange 
mainframe markets. 


1. Lefining Needs 


The first task is purchaSing a Minicomputer is to 
develop a definition of the use for the new systen. BY 
detailing the envircnment and utilization, an organization 
can guickly determine whether or not a full-powered miniccno- 
puter is needed. Our system will have to support approxi- 
mately 24 interactive users and provide such services as 
electronic nail, data base managament, and advanced 
accountirg functions. In addition the system will be 
reguired to perform fratch updates to the mainframe several 
times a day. Also, we strongly desire that the minicomputers 
have several communicaticn capabilities in terms of 
networking. 

Examining the capabilities of alternate types of 
systems will lead this organization to the conclusion that 
Biniccgrputers represent the best option. The single-user 
8-and16- Bit microccmputer systems would obviously not 
satisfy cur system requirements. High-end microccmeguters 
could certainly prcvide necessary throughput, but this 


quickly degrades as additional users are added. On the cther 
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and of the market, it would be hard to justify a mainframe 
for 24 users. 

It is this type of dedicated application that many 
experts predict the sinicomputer will continve to fulfill. 
Miniccmputers will also be required for other such aprlica- 
tions as controlling clusters of single-user microcomputers, 
dedicated communication switching and managing various 


network functions. 
2- Zhroughput 


Once the application is defined, one should estimate 
the reguired throughrput. Throughput can best be defined as 
the system's ability to accept, process and output the 
results cf transactions. The number of transactions, the 
humber of users, and the amount of data that is involved 
will provide a relative throughput reyguirement. 

Actual throughput is determined by a combination of 
Frocessing power, generally expressed in millions of 
instructions per seccnd (MIPS), bus transfer rates’) and 
memory cycle time. Such factors as the interrupt systen, 
operating scftware and the availability of cache memory also 
effects throughput, and any one of these elements is caratle 
cof distorting the overall picture. A system featuring a high 
level cf precessing fower, for example may provide unaccep- 
table response because of operating system bottlenecks 
encountered when Several users access it Simultaneously. 

The ideal system must offer the necessary support 
for immediate needs. It is also important that the systen 
ke able tc support future expanded requirements. This 
Suppcert may reside in the system itself, or in the form of 


available upgrades. 
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3. User Requirements 


Some systems support multiple users through multi- 
plexed RS-232 interfaces. Cthers may implement direct 
connecticns for each terminal using clustered controllers. 
Cnce again, the architecture will affect the throughput and 
response tine of the system. 

Cne should additionally understand the vendor's 
method cf supporting multiple users. Potential buyers 
should determine how interrupts are assigned and activated. 
A system based on priority interrupts may not provide the 
response that low friority users reguire if a large 
percentage cf the higher pricrity users commonly run CPU 
intensive programs. On the other hand, a time-slice or 
polling structure may frustrate users running long of 
complicated tasks. 

Most minicomputer vendors configure their systems 
with a limited number of high-speed ports and direct memory 
access chanrels. These ports can speed transacticns and, 
depending on the application, may be the key elements of a 
system's success. For example an application reguiring 
intensive updates to a disk resident data base would benefit 
from suck a high-speed channel. 


Be. THE HARCWARE CONFIGURATION 


In determining the application, it is important to quan- 
tify the amcunt of data required. Purchasers should examine 
such factors as the type and frequency of hard-copy reports, 
the agcunt cf data that will ke stored and the method used 
to backup that data. The peripherals supporting these func- 
tions can seriously degrade the overall performance of the 
System if chosen improperly. 

Printers should te selected to provide both the speed 


and print guality that an application reguires. 
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The amcunt and type of Dass storaye supported cn a 
system should also be considered. All systems support disk 
drives, but they vary significantly in their capacities. The 
technology used in ttre disk drive can also be important. 

Ancther element that should be examined is the method of 
copying data for archival storage. Although reel-tc-reel 
magnetic tape is tke most ccmmonly used device for this 
operation, an application may dictate the implementation of 
cartridge disks or streaming tape drives. The recording 
speed of backup device and the ability to store the media 


off-line are primary considerations in this area. 


1. Communications 


Cne advantage that minicomputers presently have over 
microcomrfuters is communications Support. Implementing a 
Miniccmputer in a distributed network reguires a data conmnu- 
nications link and prctocol. It is, therefore, very impor- 
tant that the host and minicomnputer be able to talk with 
with cre ancther. 

A ccmmon solution to this problem is through remote 
job entry. Most venders, in addition to RJE, offer emulation 
software as well as IBM SNA and X.25 protocol support. 
Several vendors have also developed proprietary networking 
Frotocols. The type of link that will be established retween 
the wainframe and the minicomputers will depend on the 
application. Remote job entry may be the nost effective 
approach for a remote system which only updates a central- 
ized data base at the end of each day. A system that inter- 
acts with a host several times a day, however, will need to 
Support an advanced frotocol or network architecture. 
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C. THE SOFIWARE QUESTION“ 


Minicomputer vendors typically provide a proprietary 
operating system, a selection cf compilers, utilities anda 
limited amcunt of applications software. The operating 
system should, of course, support the intended applicaticn. 
If the system will be supporting transaction processing, it 
is imperative that tke operating system support those tasks. 

Similarly, if pregrams are to be developed in-house, it 
is important that the system support languages already keing 
used fry the programmers. The standard supported by 


languages under consideration should be examined carefully. 


De. THE SERVICE FACTCR 


Several areas of vendor support must be addressed during 
the buying cycle. The most obvious item is maintenance. 
The primary concern in this area is the availability and 
cost of a maintenance contract as well as the location of 
the nearest maintenance center, the scheduling of preventive 
mMaintérance, and the response time. One should also ascer- 
tain the vendor's policy concerning systems configured with 
third-party software and peripherals. 

The kuyers should determine a vendor's future marketing 
plan. If a vendor is involved in developing microcomputers 
to the exclusion of minicomputers, it is possible that the 
vendor will eventually vacate the minicomputer market. Such 
a move could leave the buyers without system support and 
would severly limit the availability of third-farty 
peripherals and software. 

The vendor's willingness to provide site planning, 
installation and initial system generation of services 
Should ke studied. These items are critical tc the 
successful implementation of a new system [Ref. 11] 
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In this chapter we will onct consider system needs sepa- 
rately, instead we will present an minicomputer selection 
model which considers hardware and software features by 
their weights. Thus this jyeneral evaluation method lets the 
buyer to set his own requirements by determining the weights 
of each factor. An e€valuatin example will be presented for 
cur system, but we can also use it whenever we would like to 
expand the systen. Also, some type of minicomputers will 
ke presented to give an idea about the system cost, under 
today's marketing conditions. 


E. A SCCEL FOR SINI COMPUTER SELECTION 


Evaluating the minicomputers for selection needs a 
well-formed evaluaticn model. This model differs from other 
models in a sense that it addresses the relaticnshifs 
ketween cbjective measures (price, pertormance) and subjec- 
tive (procéessor,memory size). Particular user needs and 
circumstances could freguire some variation from these 
suggested guidelines, however, the basic principles and 
methods which are resented offer enough flexibility to 
accommodate such changes. [Ref. 12] 


Fe. A EIGOROUS EVALUATION MODEL 


What is needed is an evaluation model which has four 
Fasic caparilities: 
1. The ability to transform qualitative consideraticns 


into numerical units. 


2. The ability to express both guantitative and guali- 


tative ratings in the same units. 


3. The ability to allow the decision-maker to explic- 
itly his or her judgement as to the relative impor- 
tance of qualitative and guantitative factors. 
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4. A capacity for performing sensitivity analysis on 
the results cf the evaluation by the model. 


The rigorous evalvation model (REM) has all of the abcve 
capaktilities. The mcdel expresses quantitative considera- 
tions as monetary costs, and transforms the total cost for 
each feasible alternative into a score between zero and one 
(the scores sum to one). For each gualitative factor, the 
model translates nominal ratings into numerical Scores, and 
allows the decision-maker to express his view of the rela- 
tive importance of the subjective criteria by weighing then 
(both the scores for each alternative on each criterion, and 
the associated weighted scores, sum to one). The decision- 
maker then selects a weighting scheme which represents his 
subjective view of the relative importance of the aggregate 
objective score, in retation to the aggregate sukjective 
SCOre. 

The application cf the model to computer systems is 
illustrated by the fcllowing example. In this example crit- 
ical factors narrowed the number of minicomputers to be 
considered to five. Any computer its price range (fora 
Dininum configuration) fell outside the range $80,000 to 
$150,000 was eliminated. The five qualifying computers 


were; 
1. Data General Corporation, Eclipse MV/8000 II 


1. Multiuser-multi programming 


2. IM bytes, 32 bits storage word, 32 bits transfer 


word. 


3. COBOL, EASIC, PL/I, PASCAL, APL, REG, 
Language-C, FORTRAN 77, DG/L, SWAT available. 


4. OS: UNIX, AOS/VS, AOS/RT32 
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RS-232C, RS-449/422, 20/60 mA, RS-423 inter- 


faces. 


Asynchronous, synchronous, BSC, HDLC, Kk. Zon 
SDLC, SNA, HASP IL protocols: 


Distribution: Vendor, Vendor maintenance. 


1983, Typical system: 1MB RAM, OS and applica- 
tion software. Price: $83,000-3240,000. 


Multiuser-multi programming 


1M to 5M Eytes, 32 bits storage word, 32 bits 
transfer word. MOS memory, 24 users, virtual 


memory. 


COBGE, ERSTE? Di a, BLISS “325 CORAL 66 
Language-C, FORTRAN,DIBOL, MACRO assembly avail- 
able. 


OS: VAX/VMS 


RS-232C, RS-449/422, 20/60 mA, RS-423 inter- 


faces. 


Asynchronous, synchronous, X.25, SNA, CDCMP 


protocols. Communications channels:9 
Distribution: Vendor, Vendor maintenance. 


1982, Tyrical system: 1MB RAM, 10HM58 disk, 12 ae 
fixed disk terninal, VAX/VMS, multifunction 
comm. ccntroller, Price: $28,500-$59,400 
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1. 


Di. 


System/38 5381 Model 3 
Multiuser-multi programming 


512k to 1.5 M Dytes, 32 bits storage word, 32 


bits transfer word. 

MOSFET memory, 80 users, virtual memory. 
BASIC, CCEOL, RPG III, available. 

OSieCP F 


Rs ~ 2320) CCITT Vososeunterfaces. BSsG,. oDLC, SNA, 


protocols. Communication channels: 8 
Distribution: Vendor, on-site maintenance, 


1980 price: $58,370 - $110,220. Lease  (mo.) 
$2,403-$5,092 


Multiuser-multi programming 


512K to 4M bytes, 32 bits storage word, 32 bits 


transfer word. 
MOS memory, 32 users, virtual memory, cache 2KB 


COBOL, FASIC, Pascal, RPG FORTRAN, assembly 
PL1/G available. 


OS: PRINCS 


Asynchroncus, X.25, BSC, HitGye  Aa2o, HASP, 
DPTX (3270) ,RJE emulation protocols. 
Communications channels:32, 1 DMA channel. 


PRIMENET,RINGNET compatible. 
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8. Distribution: Vendor, on-site maintenance. 


9. 1980, Typical systems 1MB RAM, 161 MB disks 


ips tape. CKT, 16 async lines, PRIMOS, Price; 
$78, 000-£118,000 


1. Multiuser-multiprogramming 1M to 4M bytes, 32 


bits storage word, 32 bits transfer word. 


2. MOS memory, 32-48 users, virtual memory, cache 
32KB 


35, COBOL, “SRASIC, 7 i, RPG, FORTRAN, assembly 


available. 
4. OS: VS 


5. BSC, IBM 3270, 2780/3780, 3274/73277,SNA, ee 
Siemens/MSVI ICL 7182 protocols. 


6. WANGNET compatitle. 
7. Distribution: Vendor, vendor maintenance. 


@. .1983, Price: 15635000. 
Thirteen subjective factors were chosen. Each is 
discussed below, with a description of how each computer was 


rated. 


e WCRDSIZE AND CYCIE TIME Both affect computer speed and 


perfcrmance. The five computers were ranked 1 thru 5. 


e FROCESSOR General capabilities, address and instruction 


lengths, humber of registers. The computers were 


ccmpared two at atime, the better receiving point of 1. 
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MEMORY EXPANSION The maximum amount of random access 


memory (RAM) available through expansion. The number of 


KE were asSigned as scores. 


CTHER WEMORY FEATURES Various features not included 


above. Each machine was assigned a score on a scale of 


MAXIMUM NUMBER CF CHANNELS This factor will limit the 





ITyO expansion. Each computer was ranked 1 thru 5. 


NUMBER OF USERS It is important in terms of system 


availability of feotential user expansion. 


DIRECT ACCESS MEMCKY The amount of RAM coming with the 





E 
kasic configuraticn. The number of KB RAM were assigned 


as scores. 


CEFERATING SYSTEM The machine's operating system affects 
ease of use, and efficient use of the hardware. 
Operating systems were compared two at atime witha 


pcint given to tke superior operating system. 


ASSEMBLER A poor assembler can limit some applications. 
The capabilities of the assembler are directly related 
te the hardware. A zero was assigned for an average or 
mediocre assembler and a one was assigned to a _ good 


asserbler. 


CCMPILEKS The numer and type of compilersavailable for 


that machine. Each system was assigned a rank from 1 to 
ae 


NETWCRK SOFTWARE Based on availability and quality a 


Z€IO waS assigned to poor software and a one was 


assigned to good software. 


¢ HAFDWARE WITH MINIMUM CONFIGURATION This factor rates 
the hardware that is included in the npnininunm configura- 
ticn as packaged Ly the manufacturer. The hardware was 


ccupared two at atime, with a point to the better of 


tke two. 
e CTHER FEATURES Includes comments, which were not 
included in the cther categories. A rank of 1 to 5 was 


assigned to each machine. 

Fach possible pair of the above factors was 
compared. A point was assigned to the more important factor 
of each ccmparison. The subjective weights were then 
computed by dividing the points for each factor by the total 
number of foints. The resulted weights are presented in 
Table 1 


TABLE 1 
Subjective Factor Weights 


NQ SUBJECTIVE FACTOR WEIGHT 
1 Wordsize and cycle time -080 
Z Processor oizo 
J Memory expansion - 110 
+ Other Te features 007 
= Maximum numfer of channels -950 
6 Number of users - 964 
q Direct access memory - 058 
8 Operating systen oto 
a Assembler ale 
10 Compilers - 100 
11 Network software | O77 
12 Hardware with minigum configuration OS 
13 Other features -011 


The result of assigned weights in this manner was 
validated by ranking the subjective factors. 

The scores for each computer on each factor were 
converted percentages. For each alternative Table 2 gives 


the score and percentage of subjective factor measure (SFM). 
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TABLE 2 


Computation Cf Subjective Factor Measures 


DATAGEN DEC IBM PRIME WANG 
Ze Raa 5/. 33 37720 75 
$4223 i777) ; 07? 4a 07° 60 34732 
1000/06 5000/7. 32 1500/.10 40007.26 40507. 26 
Wale yn Teo 8/.24 9/2 
128/.41 247.08 807.26 B27 - 10 487.15 
10007.25 1000/.25 5127.13 5127.13 10007.25 
u7.40 37.30 yeu 07.00 17.10 
0.00 Wess 07. 00 Wess 17.33 
17.07 MOS 5/. 33 37. 20 Eye 
iwc 10 17. 20 Woo 17.20 
07.90 47/240 37. 30 Ws 10 272210 
37.20 17.07 ie We 27 57.33 
Bid eee 2 Sue - 16 e238 


The objective factor costs (OFC) were computed by 
taking tke price of Gininuo configuration and adding five 
years of maintenance charges. 

The objective factor measure (OFM) is computed kased 
on the OFC. The subjective factor measure (SFM) is comrfuted 
cy summirg the multiplication of each factor weight (SFW) by 
the respective weight for that factor given to each 
alternative. 

The program then runs a senSitivity analysis by 
varying X from zero to 1 by .05 increments, where X is 
defined as the objective factor decision weight. The 
following formula provides the measure assigned to each 
alternative: 


MEASURE= X (CEM(I)) + (1-X) (SFM(I)) 


The results of this program can be found in Table 3, 


whereas the following shows the sensitivity analysis of the 
data. 


In Table 3, WANG received the highest subjective 


factor measure, follcowed by IBM and DEC. DEC received the 
highest cbjective measure, followed by IBM. 


113 


TABLE 3 


Summary Of Objective and Subjective measures 





Tee com MAINT OFC OFM SFM 
DATAGEN 83,000 €0(572 117320 9) Slew ee 
DEC 507000 60344 70640 28 22 
IBM 58°0CO 60/400 82000 280 2 
PRIME 108,000 60689 144340 13: 16 
WANG 63,000 602434 89040 2 
MEASURE 1 
3.0 
2.6 
pec 
IBM 
22 = b ANG 
1.8 
DATA GEN. 
PR 
14 IME 
| 
.O x i 
O 2 6 8 10 | 


Figure 6.1 Subjectivity, Objectivity Relation. 


Thus, if X were zero, one was baSing his decision 
solely on subjectivity, the WANG computer would be selected. 
Cn the cther extreme, if X were one, one was basing his 
decisicn on the objective measure, then the DEC would be 
selected. 


Figure 6.1 shows the evaluation of five different 
computers. While x increasing, which means objectivity gains 
emphasis, on the other hand, while x decreasing, which means 
subjectivity gains emphasis. Thus, one can make his deci- 
sion, cty choosing arn x value which is related with its 


economical constraints. 


VII. CONCLUSIONS 

In our system design considerations it 1S obvious 
that this tyre system can not be designed in ad hoc 
fashion. We need a central planning which at least 
looks five years ahead. Because the system ccst 
will be very high and if we do not start witha 
detailed planning, we will have too many precklems 
ln the future and worse, to correct these errors 
may cost more than the original cost of the total 
systen. 

Database design 1S an important part of our overall 
system design. An inflexiable database will not let 
us to take advantage of using the computer fower 
and network facilities. System expansion must be 
considered carefully. Dtabase Eack-up, recovery and 
integrity procedures are also very important 
issues. Auditing must be provided to integrate 
data and prevent the malicious accesses. 

Network design or choosing a network architecture 
must be done carefully. Too many Kinds of incompat- 
ible type of hardware and software products exist 
1n marketplace. When we add the dollar factor it 
will be tcugher job to choose these _ eroducts. 
Also, networking needs a capability of expansion 
for further needs. Thus, it must be flexiarle and 
permit the organization to change the systen 
configuration, adding new users and so forth. 

The actual ccest of the system is very difficult to 
determine. The cost of minicomputers are fluctu- 
ating and tany new products are coming in to the 


marketplace. Dollar consideration has tc be 


kalanced with the system needs, it shouldn't be 
considered as majcr factor. Since, the system's 
further benefits may balance costs. A structured 
System cost evaluation methodology must ke kept 
during the selection process. 

There are fotentially large costs involved in 
training users and maintaining software. New systen 
will reguire a group cf programmer, analysts, to 
process software, trouble reports tests and 


changes, and maintain system documentation. 
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